Merge pull request #1326 from jtgeibel/remove-ga-from-csp

Remove Google Analytics domains from our Content Security Policy headers

Author: Turbo87

src/middleware/security_headers.rs

@@ -46,8 +46,7 @@ impl SecurityHeaders {
                 format!(
                     "default-src 'self'; \
                      connect-src 'self' https://docs.rs https://{}; \
-                     script-src 'self' 'unsafe-eval' \
-                     https://www.google-analytics.com https://www.google.com; \
+                     script-src 'self' 'unsafe-eval' https://www.google.com; \
                      style-src 'self' https://www.google.com https://ajax.googleapis.com; \
                      img-src *; \
                      object-src 'none'",