@zen-agent1mo ago
Addressed @cursor[bot]'s review comment in 724f646b: narrowed connect-src CSP from *.default.com wildcard to only pixel-cdn.default.com, following the principle of least privilege.
Add the Default Pixel tracking script to the Composio dashboard for meeting attribution tracking. This enables breakdown of where people came from to book meetings (UTM tracking, referral attribution).
Changes:
<Script src="https://pixel-cdn.default.com" strategy="afterInteractive" /> to root layout, production-only (same pattern as GA4 and Meta Pixel)script-src to allow pixel-cdn.default.comconnect-src to allow pixel-cdn.default.com and *.default.com (for beacon/API calls)pnpm lint and pnpm typecheck pass (all errors are pre-existing in unrelated files, 0 errors in changed files)NEXT_PUBLIC_VERCEL_ENV !== "production"), matching the behavior of GA4, Meta Pixel, and Dub AnalyticsAddressed @cursor[bot]'s review comment in 724f646b: narrowed connect-src CSP from *.default.com wildcard to only pixel-cdn.default.com, following the principle of least privilege.
pnpm lint and pnpm typecheck pass (all errors pre-existing in unrelated files, 0 errors in changed files)*.default.com wildcard to pixel-cdn.default.com in connect-src (724f646b)CI: Tenant Data Isolation exists and runs on other branches)The latest updates on your projects. Learn more about Vercel for GitHub.
| Project | Deployment | Actions | Updated (UTC) |
|---|---|---|---|
| dashboard | Preview, Comment | Apr 17, 2026 3:51am |