From 786d74e19ddf82b6daa80b5e0c806b8dc1d1b988 Mon Sep 17 00:00:00 2001
From: rdbsolutions <rob@rdbsolutions.co.uk>
Date: Fri, 20 May 2022 08:17:41 +0100
Subject: [PATCH] csp fix

---
 pages/_document.js | 7 ++++---
 pages/_error.js    | 1 +
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/pages/_document.js b/pages/_document.js
index 8740d189..6fcf497e 100644
--- a/pages/_document.js
+++ b/pages/_document.js
@@ -46,9 +46,10 @@ class MyDocument extends Document {
         csp += `base-uri 'self';`;
         csp += `form-action 'self';`;
         csp += `object-src 'self' data:;`;
-        csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com  https://maps.googleapis.com 'nonce-${generatedNonce}' ${
-            process.env.NODE_ENV != "production" ? " 'unsafe-eval';" : " ;"
-        }`;
+        // csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com  https://maps.googleapis.com 'nonce-${generatedNonce}' ${
+        //     process.env.NODE_ENV != "production" ? " 'unsafe-eval';" : " ;"
+        // }`;
+        csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com  https://maps.googleapis.com 'nonce-${generatedNonce}' 'unsafe-eval';`;
         //csp += `img-src 'self' https://www.googletagmanager.com https://gov.wales https://www.google-analytics.com 'nonce-${generatedNonce}' data:;`;
         csp += `style-src 'self' https://fonts.googleapis.com 'unsafe-inline' data:;`;
 
diff --git a/pages/_error.js b/pages/_error.js
index 03c19e07..b8c72c2d 100644
--- a/pages/_error.js
+++ b/pages/_error.js
@@ -33,6 +33,7 @@ function Error({ statusCode }, props) {
                                 </p>
 
                                 <a
+                                    className="govuk-link--no-underline"
                                     onClick={() => {
                                         destroyCookie({}, "pinsUser"),
                                             window.localStorage.clear(),