From 57d16b9aea0395fa59b8654cd0d1c8f763ce9aff Mon Sep 17 00:00:00 2001 From: Semih Yesilyurt Date: Tue, 4 Aug 2026 16:53:48 +0300 Subject: [PATCH] fix(analytics): CSP'ye kalan enhanced-conversion endpoint'lerini ekle MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Dev testinde ana conversion ping'i (googleadservices/pagead/conversion) geçti ama ad.doubleclick.net (ccm/collect enhanced) + google.com.tr (TR yerelleştirilmiş 1p-conversion) hâlâ bloklanıyordu. img-src/connect-src'e eklendi. Co-Authored-By: Claude Opus 4.8 --- apps/api/src/main.ts | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/apps/api/src/main.ts b/apps/api/src/main.ts index 5ea5bed..bb4dfbb 100644 --- a/apps/api/src/main.ts +++ b/apps/api/src/main.ts @@ -73,8 +73,10 @@ async function bootstrap() { "https://destek.sase.tr", // Google Ads conversion + remarketing pixel pings (fire as images). "https://www.google.com", + "https://www.google.com.tr", "https://www.googleadservices.com", "https://googleads.g.doubleclick.net", + "https://ad.doubleclick.net", ], fontSrc: ["'self'", "https:", "data:"], mediaSrc: ["'self'", "data:", "https://destek.sase.tr"], @@ -91,8 +93,10 @@ async function bootstrap() { // google.com 1p-conversion & ccm/collect enhanced-conversion beacons). "https://www.googletagmanager.com", "https://www.google.com", + "https://www.google.com.tr", "https://www.googleadservices.com", "https://googleads.g.doubleclick.net", + "https://ad.doubleclick.net", // Sentry browser SDK envelope POSTs (otolog org, de region). // Without this CSP silently blocks every error/replay upload. "https://*.ingest.de.sentry.io",