GA: fix inline-script CSP issue (#1358)

Fixes #1353
blockscout · Nov 15, 2023 · 496858d · 496858d
1 parent d3f3eaa
commit 496858d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/nextjs/csp/policies/googleAnalytics.ts b/nextjs/csp/policies/googleAnalytics.ts
@@ -16,7 +16,7 @@ export function googleAnalytics(): CspDev.DirectiveDescriptor {
     ],
     'script-src': [
       // inline script hash, see ui/shared/GoogleAnalytics.tsx
-      '\'sha256-NTmEg2dBnojQfTYrYJEmp3nG7V66756qPbQMCIBrctk=\'',
+      '\'sha256-WXRwCtfSfMoCPzPUIOUAosSaADdGgct0/Lhmnbm7MCA=\'',
       'https://www.googletagmanager.com',
       '*.google-analytics.com',
       '*.analytics.google.com',

diff --git a/ui/shared/GoogleAnalytics.tsx b/ui/shared/GoogleAnalytics.tsx
@@ -20,7 +20,7 @@ const GoogleAnalytics = () => {
           window.dataLayer = window.dataLayer || [];
           function gtag(){dataLayer.push(arguments);}
           gtag('js', new Date());
-          gtag('config', '${ id }');
+          gtag('config', window.__envs.NEXT_PUBLIC_GOOGLE_ANALYTICS_PROPERTY_ID);
         ` }
       </Script>
     </>