@@ -59,7 +59,7 @@ func CSPHeaders(telemetry bool, websocketHosts func() []string) func(next http.H
5959cspDirectiveConnectSrc : {"'self'" },
6060cspDirectiveChildSrc : {"'self'" },
6161// https://github.com/suren-atoyan/monaco-react/issues/168
62- cspDirectiveScriptSrc : {"'self' " },
62+ cspDirectiveScriptSrc : {"'self'" },
6363cspDirectiveStyleSrc : {"'self' 'unsafe-inline'" },
6464// data: is used by monaco editor on FE for Syntax Highlight
6565cspDirectiveFontSrc : {"'self' data:" },
@@ -88,11 +88,6 @@ func CSPHeaders(telemetry bool, websocketHosts func() []string) func(next http.H
8888if telemetry {
8989// If telemetry is enabled, we report to coder.com.
9090cspSrcs .Append (cspDirectiveConnectSrc ,"https://coder.com" )
91- // These are necessary to allow meticulous to collect sampling to
92- // improve our testing. Only remove these if we're no longer using
93- // their services.
94- cspSrcs .Append (cspDirectiveConnectSrc ,meticulousConnectSrc ... )
95- cspSrcs .Append (cspDirectiveScriptSrc ,meticulousScriptSrc ... )
9691}
9792
9893// This extra connect-src addition is required to support old webkit
@@ -136,8 +131,3 @@ func CSPHeaders(telemetry bool, websocketHosts func() []string) func(next http.H
136131})
137132}
138133}
139-
140- var (
141- meticulousConnectSrc = []string {"https://cognito-identity.us-west-2.amazonaws.com" ,"https://user-events-v3.s3-accelerate.amazonaws.com" ,"*.sentry.io" }
142- meticulousScriptSrc = []string {"https://snippet.meticulous.ai" ,"https://browser.sentry-cdn.com" }
143- )