rusackas commented on PR #36685:
URL: https://github.com/apache/superset/pull/36685#issuecomment-3858387592

   @sebbASF Thanks for the guidance! I've updated the .htaccess to use the 
correct `SetEnv CSP_PROJECT_DOMAINS` format as specified in 
https://infra.apache.org/tools/csp.html
   
   The domains included are:
   - `widget.kapa.ai` - AI chatbot widget
   - `https://*.googleapis.com/`, `https://*.google.com/`, 
`https://*.gstatic.com/` - Google Calendar embed, reCAPTCHA
   - `https://*.github.com/`, `https://*.githubusercontent.com/` - GitHub 
user-attachment images in docs
   - `https://*.algolia.net/`, `https://*.algolianet.com/` - Algolia DocSearch
   
   Let me know if any of these need VP Data Privacy approval or if the format 
needs adjustment.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to