From 1de2e33bbbf10211f1b3b3354c1ef165b7e92a08 Mon Sep 17 00:00:00 2001
From: Brad <44413459+lastbestdev@users.noreply.github.com>
Date: Tue, 27 Jan 2026 09:14:00 -0800
Subject: [PATCH] [PM-31182] Add HIBP icons URL to dev configuration for
 allowed Content-Security-Policy domains  (#18565)

* add url for loading HIBP icons

* remove old hibp location
---
 apps/web/webpack.base.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/web/webpack.base.js b/apps/web/webpack.base.js
index cc17b3b7cfd..016d2b0fe61 100644
--- a/apps/web/webpack.base.js
+++ b/apps/web/webpack.base.js
@@ -319,7 +319,7 @@ module.exports.buildConfig = function buildConfig(params) {
                     https://*.paypal.com
                     https://www.paypalobjects.com
                     https://q.stripe.com
-                    https://haveibeenpwned.com
+                    https://logos.haveibeenpwned.com
                     ;media-src
                     'self'
                     https://assets.bitwarden.com