From a75f6679b9dd8e90292e86a37715d14dfc20f62e Mon Sep 17 00:00:00 2001
From: Mike Cao <moocao@gmail.com>
Date: Wed, 20 Dec 2023 09:31:33 -0800
Subject: [PATCH] Fixed CSP and telemetry errors.

---
 next.config.js         | 2 +-
 src/app/(main)/App.tsx | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/next.config.js b/next.config.js
index a155ece7..e684ae97 100644
--- a/next.config.js
+++ b/next.config.js
@@ -8,7 +8,7 @@ const contentSecurityPolicy = [
   `img-src *`,
   `script-src 'self' 'unsafe-eval' 'unsafe-inline'`,
   `style-src 'self' 'unsafe-inline'`,
-  `connect-src 'self' api.umami.is`,
+  `connect-src 'self' api.umami.is cloud.umami.is`,
   `frame-ancestors 'self' ${process.env.ALLOWED_FRAME_URLS || ''}`,
 ];
 
diff --git a/src/app/(main)/App.tsx b/src/app/(main)/App.tsx
index 4b093165..74be8292 100644
--- a/src/app/(main)/App.tsx
+++ b/src/app/(main)/App.tsx
@@ -27,7 +27,7 @@ export function App({ children }) {
       {children}
       <UpdateNotice user={user} config={config} />
       {process.env.NODE_ENV === 'production' && !pathname.includes('/share/') && (
-        <Script src={`telemetry.js`} />
+        <Script src={`/telemetry.js`} />
       )}
     </>
   );