Add 6sense domains to CSP
What does this MR do and why?
Related issue: https://gitlab.com/gitlab-com/marketing/marketing-strategy-performance/-/issues/1643#note_1832634845
The 6sense WebTag script is placed on gitlab.com's trial registration pages: /trial_registrations and /trials/new
CSP is blocking certain 6sense domains from loading:
This MR adds these domains to CSP:
- *.6sc.co
- *.6sense.com
Domain Descriptions:
- https://c.6sc.co/ - The 6sense Web Tag utilizes an endpoint c.6sc.co to provide the cookie values used in beacon and in the company details API. This service is only currently used by our Web tag and also potentially used in 6sense-hosted Media (Ads). The cookie value provided serves as a “Device ID” which helps the IP deanonymization process in both the web data in beacon and in the Company Details API match rate.
- https://ipv6.6sc.co/ - endpoint that returns an IPv6 address from a web visitor rather than IPv4. This is utilized within our ID Graph to tie a visitor back to an Account based on the IP.
- https://epsilon.6sense.com/v3/company/details - This enables the web tag to call the company details API, which can capture Account firmographic data of the web visitor
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Screenshots or screen recordings
Screenshots are required for UI changes, and strongly recommended for all other merge requests.
| Before | After |
|---|---|
 |
How to set up and validate locally
Numbered steps to set up and validate the change are strongly suggested.
Edited by Dennis Charukulvanich