From 49b5477ebc6d3e1e69ffb21c0a7cdbff944211c9 Mon Sep 17 00:00:00 2001
From: rekt-hard <72449192+rekt-hard@users.noreply.github.com>
Date: Tue, 9 Mar 2021 09:04:24 +0100
Subject: [PATCH] fix: extend csp to allow datacite and zammad (#48)

---
 invenio_config_tugraz/config.py | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/invenio_config_tugraz/config.py b/invenio_config_tugraz/config.py
index b0021db..c258aee 100644
--- a/invenio_config_tugraz/config.py
+++ b/invenio_config_tugraz/config.py
@@ -39,7 +39,7 @@ APP_ALLOWED_HOSTS = [
     "127.0.0.1",
     "invenio-dev01.tugraz.at",
     "invenio-test.tugraz.at",
-    "repository.tugraz.at"
+    "repository.tugraz.at",
 ]
 """Allowed Hosts"""
 
@@ -53,6 +53,9 @@ APP_DEFAULT_SECURE_HEADERS = {
             "'unsafe-inline'",
             "'unsafe-eval'",
             "blob:",
+            "ub-support.tugraz.at",  # zammad contact form
+            "api.datacite.org/dois",  # datacite
+            "api.test.datacite.org/dois",  # datacite test
         ],
     },
     "content_security_policy_report_only": False,