Merged PR 2420: added welsh translations of api endpoints
added welsh translations of api endpoints Related work items: #23879
This commit is contained in:
+7
-7
@@ -14,7 +14,7 @@ export function middleware(request) {
|
||||
font-src 'self' https://pro.fontawesome.com/ https://fonts.gstatic.com/ ;
|
||||
object-src 'none';
|
||||
base-uri 'self';
|
||||
frame-src https://datamap.gov.wales/ https://www.youtube.com https://www.youtube-nocookie.com;
|
||||
frame-src https://datamap.gov.wales/ https://mapdata.llyw.cymru/ https://www.youtube.com https://www.youtube-nocookie.com;
|
||||
form-action 'self' ` +
|
||||
process.env.NEXTAUTH_URL +
|
||||
`;
|
||||
@@ -49,17 +49,17 @@ export function middleware(request) {
|
||||
// CSP policy
|
||||
requestHeaders.set(
|
||||
"Content-Security-Policy",
|
||||
contentSecurityPolicyHeaderValue,
|
||||
contentSecurityPolicyHeaderValue
|
||||
);
|
||||
|
||||
const response = NextResponse.next({
|
||||
request: {
|
||||
headers: requestHeaders,
|
||||
},
|
||||
headers: requestHeaders
|
||||
}
|
||||
});
|
||||
response.headers.set(
|
||||
"Content-Security-Policy",
|
||||
contentSecurityPolicyHeaderValue,
|
||||
contentSecurityPolicyHeaderValue
|
||||
);
|
||||
|
||||
// XSS protection (legacy)
|
||||
@@ -77,13 +77,13 @@ export function middleware(request) {
|
||||
// Permissions lockdown
|
||||
response.headers.set(
|
||||
"Permissions-Policy",
|
||||
"geolocation=(), camera=(), microphone=(), fullscreen=(self)",
|
||||
"geolocation=(), camera=(), microphone=(), fullscreen=(self)"
|
||||
);
|
||||
|
||||
// Enforce HTTPS via HSTS
|
||||
response.headers.set(
|
||||
"Strict-Transport-Security",
|
||||
"max-age=63072000; includeSubDomains; preload",
|
||||
"max-age=63072000; includeSubDomains; preload"
|
||||
);
|
||||
|
||||
return response;
|
||||
|
||||
Reference in New Issue
Block a user