Security Headers were using url from dns prefetch instead of script url

exceptionless/Exceptionless.UI#195

Dockerfile

@@ -1,4 +1,4 @@
-ARG UI_VERSION=ui:2.9.1
+ARG UI_VERSION=ui:2.9.2
 FROM exceptionless/${UI_VERSION} AS ui
 
 FROM mcr.microsoft.com/dotnet/core/sdk:3.1 AS build

README.md

@@ -13,7 +13,7 @@ Refer to the [Exceptionless documentation wiki](https://github.com/exceptionless
 ## Hosting Options
 We provide very reasonably priced hosting at [Exceptionless](http://exceptionless.com). By using our hosted service, you are supporting the project and helping it get better! We also provide set up and support services.
 
-Exceptionless can be run locally as simply as `docker run --rm -it -p 5000:80 exceptionless/exceptionless:6.1.1`. This will run a completely self-contained simple instance of Exceptionless. It is only suitable for testing purposes since it will not persist data. For more complete setups, check out the [self hosting documentation](https://github.com/exceptionless/Exceptionless/wiki/Self-Hosting). Also, if you want to support the project while self hosting you can send us a pull request or [donation](https://donorbox.org/exceptionless?recurring=true).
+Exceptionless can be run locally as simply as `docker run --rm -it -p 5000:80 exceptionless/exceptionless:6.1.3`. This will run a completely self-contained simple instance of Exceptionless. It is only suitable for testing purposes since it will not persist data. For more complete setups, check out the [self hosting documentation](https://github.com/exceptionless/Exceptionless/wiki/Self-Hosting). Also, if you want to support the project while self hosting you can send us a pull request or [donation](https://donorbox.org/exceptionless?recurring=true).
 
 ## Contributing
 _In appreciation for anyone who submits a non-trivial pull request, we will give you a free [Exceptionless](http://exceptionless.com) paid plan for a year. After your pull request is accepted, simply send an email to team@exceptionless.io with the name of your organization and we will upgrade you to a paid plan._

k8s/ex-dev-values.yaml

@@ -7,7 +7,7 @@ api:
     - dev-api.exceptionless.io
 app:
   image:
-    tag: "2.9.1"
+    tag: "2.9.2"
   defaultDomain: dev-app.exceptionless.io
   domains:
     - dev-app.exceptionless.io

k8s/ex-prod-values.yaml

@@ -7,7 +7,7 @@ api:
 app:
   replicaCount: 2
   image:
-    tag: "2.9.1"
+    tag: "2.9.2"
   defaultDomain: be.exceptionless.io
   domains:
     - be.exceptionless.io

src/Exceptionless.Web/Startup.cs

@@ -163,8 +163,8 @@ public void Configure(IApplicationBuilder app) {
                 csp.AllowFonts.FromSelf()
                     .From("https://fonts.gstatic.com")
                     .From("http://fonts.gstatic.com")
-                    .From("https://www.jsdelivr.com")
-                    .From("http://www.jsdelivr.com");
+                    .From("https://cdn.jsdelivr.net")
+                    .From("http://cdn.jsdelivr.net");
                 csp.AllowImages.FromSelf()
                     .From("data:")
                     .From("https://q.stripe.com")
@@ -176,14 +176,14 @@ public void Configure(IApplicationBuilder app) {
                     .AllowUnsafeEval()
                     .From("https://js.stripe.com")
                     .From("http://js.stripe.com")
-                    .From("https://www.jsdelivr.com")
-                    .From("http://www.jsdelivr.com");
+                    .From("https://cdn.jsdelivr.net")
+                    .From("http://cdn.jsdelivr.net");
                 csp.AllowStyles.FromSelf()
                     .AllowUnsafeInline()
                     .From("https://fonts.googleapis.com")
                     .From("http://fonts.googleapis.com")
-                    .From("https://www.jsdelivr.com")
-                    .From("http://www.jsdelivr.com");
+                    .From("https://cdn.jsdelivr.net")
+                    .From("http://cdn.jsdelivr.net");
             });
 
             app.Use(async (context, next) => {