robbond/pedwfrontend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merged PR 855: csp fix

Browse Source 
csp fix

Related work items: #7639
This commit is contained in:
Robert Bond
2022-05-20 07:18:34 +00:00
parent ea2729b9ae 786d74e19d
commit 55a9a15a57
2 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pages/_document.js
+4 -3
View File
@@ -46,9 +46,10 @@ class MyDocument extends Document {
csp += `base-uri 'self';`; csp += `base-uri 'self';`;
csp += `form-action 'self';`; csp += `form-action 'self';`;
csp += `object-src 'self' data:;`; csp += `object-src 'self' data:;`;
csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com https://maps.googleapis.com 'nonce-${generatedNonce}' ${ // csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com https://maps.googleapis.com 'nonce-${generatedNonce}' ${
process.env.NODE_ENV != "production" ? " 'unsafe-eval';" : " ;" // process.env.NODE_ENV != "production" ? " 'unsafe-eval';" : " ;"
}`; // }`;
csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com https://maps.googleapis.com 'nonce-${generatedNonce}' 'unsafe-eval';`;
//csp += `img-src 'self' https://www.googletagmanager.com https://gov.wales https://www.google-analytics.com 'nonce-${generatedNonce}' data:;`; //csp += `img-src 'self' https://www.googletagmanager.com https://gov.wales https://www.google-analytics.com 'nonce-${generatedNonce}' data:;`;
csp += `style-src 'self' https://fonts.googleapis.com 'unsafe-inline' data:;`; csp += `style-src 'self' https://fonts.googleapis.com 'unsafe-inline' data:;`;
pages/_error.js
+1
View File
@@ -33,6 +33,7 @@ function Error({ statusCode }, props) {
</p> </p>
<a <a
className="govuk-link--no-underline"
onClick={() => { onClick={() => {
destroyCookie({}, "pinsUser"), destroyCookie({}, "pinsUser"),
window.localStorage.clear(), window.localStorage.clear(),