Snowplow is missing from the CSP on controllers that inherit from Devise
On gprd-cny
the automatically generated CSP is enabled and I'm seeing a lot of errors coming from connect-src
violations caused by requests going to Snowplow on the sign in page. https://sentry.gitlab.net/gitlab/gitlabcom-csp/issues/2715211/events/ab3c182ce6a64921a6c9d55b5b10e7d3/
#337973 (closed) added snowplow (when configured) to the CSP in ApplicationController
but some pages are missing.
Edited by Dominic Couture