Fixed the analytics and security headers for the Website service target.

2026-08-20 00:55:09 +02:00
parent 5422c8466d
commit b6ad9ff497
3 changed files with 42 additions and 4 deletions
@@ -10,7 +10,7 @@ extension String {
        /// Single-sourced here: both ``scriptURL`` and the session recorder script the pages embed in recorder mode derive from this
        /// constant. It is deliberately not a configuration key — the `Content-Security-Policy` must allow the same origin, and a value that
        /// can drift at runtime would silently break the tracker it is supposed to permit.
-        public static let origin = "https://analytics.example.com"
+        public static let origin = "https://analytics.rock-n-code.com"
        /// The URL the analytics tracker script is loaded from.
        public static let scriptURL = "\(origin)/script"
        /// The default analytics website identifier the tracker reports as: empty, which omits the tracker entirely.