Remove Google Analytics domains from our Content Security Policy headers
@@ -46,8 +46,7 @@ impl SecurityHeaders {
format!(
"default-src 'self'; \
connect-src 'self' https://docs.rs https://{}; \
- script-src 'self' 'unsafe-eval' \
- https://www.google-analytics.com https://www.google.com; \
+ script-src 'self' 'unsafe-eval' https://www.google.com; \
style-src 'self' https://www.google.com https://ajax.googleapis.com; \
img-src *; \
object-src 'none'",
