Merge pull request #440 from UN-OCHA/feature/OPS-10398-add-seckit

chore: add more csp allowances for google site search
UN-OCHA · Jun 12, 2024 · a88c596 · a88c596
2 parents 2d0696b + 7d42415
commit a88c596
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/config/seckit.settings.yml b/config/seckit.settings.yml
@@ -8,9 +8,9 @@ seckit_xss:
       webkit: false
     report-only: false
     default-src: "'self'"
-    script-src: "'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com https://*.google.com https://*.googletagmanager.com *.google-analytics.com https://tagmanager.google.com"
+    script-src: "'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com www.gstatic.com https://*.google.com https://*.googletagmanager.com *.google-analytics.com https://tagmanager.google.com"
     object-src: "'none'"
-    style-src: "'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com fonts.googleapis.com"
+    style-src: "'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com fonts.googleapis.com https://www.google.com"
     img-src: "'self' data: https://*.google-analytics.com https://*.googletagmanager.com gstatic.com https://www.google.com https://google.com *.youtube.com *.placeholder.com"
     media-src: "'none'"
     frame-src: "'self' https://www.googletagmanager.com"