Update csp_whitelist.xml

bold-commerce · Jul 30, 2024 · c2e004e · c2e004e
1 parent 230c756
commit c2e004e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/etc/csp_whitelist.xml b/etc/csp_whitelist.xml
@@ -7,14 +7,16 @@
                 <value id="bold_commerce" type="host">api.boldcommerce.com</value>
                 <value id="bold_commerce_staging" type="host">api.staging.boldcommerce.com</value>
                 <value id="cashier" type="host">cashier.boldcommerce.com</value>
+                <value id="bold_braintree_sandbox" type="host">*.sandbox.braintree-api.com</value>
+                <value id="bold_braintree" type="host">*.braintree-api.com</value>
             </values>
         </policy>
         <policy id="script-src">
             <values>
-                <value id="allow_inline_resource" type="host">unsafe-inline</value>
                 <value id="bold_commerce" type="host">api.boldcommerce.com</value>
                 <value id="bold_commerce_staging" type="host">api.staging.boldcommerce.com</value>
                 <value id="cashier" type="host">cashier.boldcommerce.com</value>
+                <value id="bold_paypal" type="host">*.paypal.com</value>
             </values>
         </policy>
         <policy id="frame-src">
@@ -39,6 +41,7 @@
         <policy id="img-src">
             <values>
                 <value id="bold_commerce_static" type="host">static.boldcommerce.com</value>
+                <value id="bold_paypal_images" type="host">*.paypal.com</value>
             </values>
         </policy>
         <policy id="font-src">