Put CSP in to headers and not Meta tags

2025-04-14 15:00:14 +01:00
parent 6543161bad
commit 8f9652003e
4 changed files with 92 additions and 6 deletions
@@ -6,11 +6,13 @@ export const Tracking = ({ googleTagManagerID, nonce, cookieObj }) => {
    return (
        <Fragment>
            <script
+                nonce={nonce}
                async
                // strategy="afterInteractive"
                src={`https://www.googletagmanager.com/gtag/js?id=${googleTagManagerID}`}
            />
            <script
+                nonce={nonce}
                async
                id="google-analytics"
                // strategy="afterInteractive"
@@ -48,10 +50,11 @@ export const Tracking = ({ googleTagManagerID, nonce, cookieObj }) => {
    );
 };

-export const TrackingNoScript = ({ googleTagManagerID }) => (
+export const TrackingNoScript = ({ nonce, googleTagManagerID }) => (
    <Fragment>
        <noscript>
            <iframe
+                nonce={nonce}
                title="google analytics"
                src={`https://www.googletagmanager.com/ns.html?id=${googleTagManagerID}`}
                height="0"