Merged PR 2420: added welsh translations of api endpoints

added welsh translations of api endpoints

Related work items: #23879
This commit is contained in:
Robert Bond
2026-06-23 10:38:24 +00:00
parent d7bb1acb10
commit 6d0bc35612
13 changed files with 171 additions and 119 deletions
+7 -7
View File
@@ -14,7 +14,7 @@ export function middleware(request) {
font-src 'self' https://pro.fontawesome.com/ https://fonts.gstatic.com/ ;
object-src 'none';
base-uri 'self';
frame-src https://datamap.gov.wales/ https://www.youtube.com https://www.youtube-nocookie.com;
frame-src https://datamap.gov.wales/ https://mapdata.llyw.cymru/ https://www.youtube.com https://www.youtube-nocookie.com;
form-action 'self' ` +
process.env.NEXTAUTH_URL +
`;
@@ -49,17 +49,17 @@ export function middleware(request) {
// CSP policy
requestHeaders.set(
"Content-Security-Policy",
contentSecurityPolicyHeaderValue,
contentSecurityPolicyHeaderValue
);
const response = NextResponse.next({
request: {
headers: requestHeaders,
},
headers: requestHeaders
}
});
response.headers.set(
"Content-Security-Policy",
contentSecurityPolicyHeaderValue,
contentSecurityPolicyHeaderValue
);
// XSS protection (legacy)
@@ -77,13 +77,13 @@ export function middleware(request) {
// Permissions lockdown
response.headers.set(
"Permissions-Policy",
"geolocation=(), camera=(), microphone=(), fullscreen=(self)",
"geolocation=(), camera=(), microphone=(), fullscreen=(self)"
);
// Enforce HTTPS via HSTS
response.headers.set(
"Strict-Transport-Security",
"max-age=63072000; includeSubDomains; preload",
"max-age=63072000; includeSubDomains; preload"
);
return response;