Merged PR 855: csp fix

csp fix Related work items: #7639
2022-05-20 07:18:34 +00:00
parent ea2729b9ae 786d74e19d
commit 55a9a15a57
2 changed files with 5 additions and 3 deletions
@@ -46,9 +46,10 @@ class MyDocument extends Document {
        csp += `base-uri 'self';`;
        csp += `form-action 'self';`;
        csp += `object-src 'self' data:;`;
-        csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com  https://maps.googleapis.com 'nonce-${generatedNonce}' ${
-            process.env.NODE_ENV != "production" ? " 'unsafe-eval';" : " ;"
-        }`;
+        // csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com  https://maps.googleapis.com 'nonce-${generatedNonce}' ${
+        //     process.env.NODE_ENV != "production" ? " 'unsafe-eval';" : " ;"
+        // }`;
+        csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com  https://maps.googleapis.com 'nonce-${generatedNonce}' 'unsafe-eval';`;
        //csp += `img-src 'self' https://www.googletagmanager.com https://gov.wales https://www.google-analytics.com 'nonce-${generatedNonce}' data:;`;
        csp += `style-src 'self' https://fonts.googleapis.com 'unsafe-inline' data:;`;

@@ -33,6 +33,7 @@ function Error({ statusCode }, props) {
                                </p>

                                <a
+                                    className="govuk-link--no-underline"
                                    onClick={() => {
                                        destroyCookie({}, "pinsUser"),
                                            window.localStorage.clear(),