[CSP] explicit cdn.jsdeliver authorizations

gip-inclusion · Sep 26, 2023 · 6fb59d1 · 6fb59d1
1 parent 0606205
commit 6fb59d1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/settings/base.py b/config/settings/base.py
@@ -360,7 +360,7 @@
 CSP_FONT_SRC = ("'self'", "https://fonts.gstatic.com/", "data:")
 CSP_SCRIPT_SRC = (
     "'self'",
-    "https://cdn.jsdelivr.net/npm/chart.js",
+    "https://cdn.jsdelivr.net/npm/chart.js@4.0.1",
     "https://cdn.jsdelivr.net/npm/[email protected]/dist/jquery.min.js",
     "https://cdn.jsdelivr.net/npm/@popperjs/[email protected]/dist/umd/popper.min.js",
     "https://cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.min.js",