From 63e887ce363943f4aa449a3eac1f13b86824ca62 Mon Sep 17 00:00:00 2001 From: Navjot Maan Date: Wed, 7 Jan 2026 11:12:20 +0530 Subject: [PATCH] Add existing domains in CSP builder page --- content/pages/tools/csp.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/content/pages/tools/csp.md b/content/pages/tools/csp.md index 1e605adf0..26c520590 100644 --- a/content/pages/tools/csp.md +++ b/content/pages/tools/csp.md @@ -27,6 +27,13 @@ SetEnv CSP_PROJECT_DOMAINS "https://*.algolia.net/ https://*.algolianet.com/ htt Any hosts listed in the `CSP_PROJECT_DOMAINS` variable will be added to the default- and base source elements in the existing CSP header, and should suffice for the vast majority of projects. +The following domains are already allowed by default and do not need to be added: +* `https://www.apachecon.com/` +* `https://www.communityovercode.org/` +* `https://*.apache.org/` +* `https://apache.org/` +* `https://*.scarf.sh/` + If you need more specifically tailored headers, please reach out to users@infra.apache.org and we can assist you.