From 58b4cd2bcb9d2cff092e566a9ad8f9df4c191225 Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Sat, 17 Oct 2026 08:48:27 +0000 Subject: [PATCH] Add the CrawlProof tracker so submitfleet shows up in the fleet report Tag on every page (project 687dc08f) and crawlproof.com allowed in the CSP's script-src and connect-src, which otherwise blocks both the script and its events. Co-Authored-By: Claude Opus 5.5 --- src/web.ts | 2 +- web/app.html | 1 + web/auth.html | 1 + web/authorize.html | 1 + web/docs.html | 1 + web/error.html | 1 + web/index.html | 1 + web/link.html | 1 + 8 files changed, 8 insertions(+), 1 deletion(-) diff --git a/src/web.ts b/src/web.ts index bf69aad..3f0f3cf 100644 --- a/src/web.ts +++ b/src/web.ts @@ -26,7 +26,7 @@ const TYPES: Record = { }; export const PAGE_CSP = - "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data: https:; connect-src 'self'; font-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' http://127.0.0.1:* http://localhost:*"; + "default-src 'self'; script-src 'self' https://crawlproof.com; style-src 'self'; img-src 'self' data: https:; connect-src 'self' https://crawlproof.com; font-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' http://127.0.0.1:* http://localhost:*"; export interface WebOptions { mailer: Mailer; diff --git a/web/app.html b/web/app.html index 607c41a..f3c36ef 100644 --- a/web/app.html +++ b/web/app.html @@ -7,6 +7,7 @@ +