switch to vendored sentry JS SDK

Author: syphar

src/web/csp.rs

@@ -83,7 +83,6 @@ impl Csp {
         //
         // This `.unwrap` is safe since the `Write` impl on str can never fail.
         write!(result, "; script-src 'nonce-{}'", self.nonce).unwrap();
-        result.push_str(" https://browser.sentry-cdn.com https://js.sentry-cdn.com");
     }
 
     fn render_svg(&self, result: &mut String) {
@@ -199,7 +198,7 @@ mod tests {
                  style-src 'self'; \
                  font-src 'self'; \
                  connect-src 'self' *.sentry.io; \
-                 script-src 'nonce-{}' https://browser.sentry-cdn.com https://js.sentry-cdn.com",
+                 script-src 'nonce-{}'",
                 csp.nonce()
             )),
             csp.render(ContentType::Html)

templates/base.html

@@ -19,10 +19,10 @@
 
         {% if config.sentry_dsn %}
             <script
-                src="https://browser.sentry-cdn.com/7.105.0/bundle.tracing.min.js"
-                integrity="sha384-XFfw9fN0ZxeLnveKcWT/zLOcibWw9ewRfNiUu/teAuMfP4G3Oy7lLh7rN3rX2T7M"
-                crossorigin="anonymous"
-            ></script>
+                nonce="{{ csp_nonce }}"
+                src="/-/static/sentry/bundle.tracing.7.105.0.min.js"
+                type="text/javascript">
+            </script>
 
             <script nonce="{{ csp_nonce }}">
                 Sentry.init({

vendor/sentry/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 Functional Software, Inc. dba Sentry
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.