|
3 | 3 | <policies> |
4 | 4 | <policy id="script-src"> |
5 | 5 | <values> |
6 | | - <value id="afterpay-sandbox-consumer-portal" type="host">https://portal.sandbox.afterpay.com</value> |
7 | | - <value id="afterpay-production-consumer-portal" type="host">https://portal.afterpay.com</value> |
8 | | - <value id="afterpay-cdn" type="host">https://static.afterpay.com</value> |
| 6 | + <value id="afterpay" type="host">*.afterpay.com</value> |
| 7 | + <value id="afterpay-cdn" type="host">*.afterpaycdn.com</value> |
9 | 8 | <value id="square-jslib" type="host">*.squarecdn.com</value> |
10 | | - <value id="hbiq-jslib" type="host">https://hbiq.net</value> |
| 9 | + <value id="cash-cdn" type="host">*.cash.app</value> |
11 | 10 | </values> |
12 | 11 | </policy> |
13 | 12 | <policy id="connect-src"> |
14 | 13 | <values> |
15 | 14 | <value id="afterpay-connect" type="host">*.afterpay.com</value> |
| 15 | + <value id="afterpay-beta-connect" type="host">*.afterpay-beta.com</value> |
| 16 | + <value id="afterpay-cdn-connect" type="host">*.afterpaycdn.com</value> |
16 | 17 | <value id="square-jslib-connect" type="host">*.squarecdn.com</value> |
17 | | - <value id="hbiq-jslib-connect" type="host">https://hbiq.net</value> |
18 | | - <value id="iq-sbox-connect" type="host">https://iq.afterpay-beta.com</value> |
19 | | - <value id="iq-prod-connect" type="host">https://iq.afterpay.com</value> |
| 18 | + <value id="cash-cdn-connect" type="host">*.cash.app</value> |
20 | 19 | </values> |
21 | 20 | </policy> |
22 | 21 | <policy id="frame-src"> |
23 | 22 | <values> |
24 | | - <value id="afterpay-widget-connect" type="host">widgets.sandbox.afterpay.com</value> |
| 23 | + <value id="afterpay-frame" type="host">*.afterpay.com</value> |
| 24 | + <value id="afterpay-cdn-frame" type="host">*.afterpaycdn.com</value> |
| 25 | + <value id="square-frame" type="host">*.squarecdn.com</value> |
| 26 | + <value id="cash-cdn-frame" type="host">*.cash.app</value> |
25 | 27 | </values> |
26 | 28 | </policy> |
27 | 29 | <policy id="style-src"> |
28 | 30 | <values> |
29 | | - <value id="afterpay-cdn-style" type="host">static.afterpay.com/</value> |
30 | | - <value id="square-jslib-style" type="host">*.squarecdn.com</value> |
| 31 | + <value id="afterpay-style" type="host">*.afterpay.com/</value> |
| 32 | + <value id="afterpay-cdn-style" type="host">*.afterpaycdn.com</value> |
| 33 | + <value id="square-jslib-style" type="host">*.squarecdn.com</value> |
| 34 | + <value id="cash-cdn-style" type="host">*.cash.app</value> |
31 | 35 | </values> |
32 | 36 | </policy> |
33 | 37 | <policy id="img-src"> |
34 | 38 | <values> |
35 | 39 | <value id="afterpay-img" type="host">*.afterpay.com/</value> |
| 40 | + <value id="afterpay-cdn-img" type="host">*.afterpaycdn.com</value> |
| 41 | + <value id="square-img" type="host">*.squarecdn.com</value> |
| 42 | + <value id="cash-cdn-img" type="host">*.cash.app</value> |
36 | 43 | </values> |
37 | 44 | </policy> |
38 | 45 | <policy id="font-src"> |
39 | 46 | <values> |
| 47 | + <value id="afterpay-font" type="host">*.afterpay.com/</value> |
| 48 | + <value id="afterpay-cdn-font" type="host">*.afterpaycdn.com</value> |
40 | 49 | <value id="square-cdn-font" type="host">*.squarecdn.com</value> |
41 | | - </values> |
| 50 | + <value id="cash-cdn-font" type="host">*.cash.app</value> </values> |
42 | 51 | </policy> |
43 | 52 | </policies> |
44 | 53 | </csp_whitelist> |
0 commit comments