From 2c073ae488bfe38dc5102f687cac7767ed749e05 Mon Sep 17 00:00:00 2001
From: Kia Lam <digitalanime@gmail.com>
Date: Fri, 11 Mar 2022 08:50:28 -0800
Subject: [PATCH 1/2] Add d3 to CSP.

---
 awx/ui/public/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/awx/ui/public/index.html b/awx/ui/public/index.html
index 301f9bf209..67c11376ac 100644
--- a/awx/ui/public/index.html
+++ b/awx/ui/public/index.html
@@ -24,7 +24,7 @@
       </script>
       <meta
         http-equiv="Content-Security-Policy"
-        content="default-src 'self'; connect-src 'self' ws: wss:; style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-{{ csp_nonce }}' *.pendo.io; img-src 'self' *.pendo.io data:;"
+        content="default-src 'self'; connect-src 'self' ws: wss:; style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-{{ csp_nonce }}' *.pendo.io; img-src 'self' *.pendo.io data:; worker-src https://d3js.org;"
       />
       <link rel="shortcut icon" href="{% static 'media/favicon.ico' %}" />
     <% } else { %>

From 5be901c0443947c0c9e78b8cb545b954e37ec8f2 Mon Sep 17 00:00:00 2001
From: Tiago <tiago.goes2009@gmail.com>
Date: Fri, 11 Mar 2022 15:51:35 -0300
Subject: [PATCH 2/2] fix CSP rules

---
 awx/ui/public/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/awx/ui/public/index.html b/awx/ui/public/index.html
index 67c11376ac..c3200940bf 100644
--- a/awx/ui/public/index.html
+++ b/awx/ui/public/index.html
@@ -24,7 +24,7 @@
       </script>
       <meta
         http-equiv="Content-Security-Policy"
-        content="default-src 'self'; connect-src 'self' ws: wss:; style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-{{ csp_nonce }}' *.pendo.io; img-src 'self' *.pendo.io data:; worker-src https://d3js.org;"
+        content="default-src 'self'; connect-src 'self' ws: wss:; style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-{{ csp_nonce }}' *.pendo.io https://d3js.org; img-src 'self' *.pendo.io data:; worker-src 'self';"
       />
       <link rel="shortcut icon" href="{% static 'media/favicon.ico' %}" />
     <% } else { %>