Fetching module fails due to CSP

[jdxgfty]

Hi,

I ran into a CSP issue when trying to browse the source code for the heckel.io/ntfy/v2 package.

When fetching from proxy.golang.org, the proxy responds with a 302 redirect to storage.googleapis.com. Since the CSP's connect-src directive only includes proxy.golang.org, the browser blocks the redirected request.

$ curl -i https://proxy.golang.org/heckel.io/ntfy/v2/@v/v2.17.0.zip

HTTP/1.1 302 Found
[...]
Location: https://storage.googleapis.com/proxy-golang-org-prod/52b595c9a5adea8e-heckel.io:ntfy:v2-v2.17.0.zip?[query_params]
[...]