Skip to content

Commit c162e00

Browse files
authored
fix: update CSP in Caddy (#1059)
1 parent fccf1db commit c162e00

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

frontend/Caddyfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@
2323
Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate"
2424
X-Content-Type-Options "nosniff"
2525
Strict-Transport-Security "max-age=31536000"
26-
Content-Security-Policy "base-uri 'self'; connect-src 'self' https://*.gov.bc.ca https://*.amazoncognito.com https://*.cloudfront.net https://cdnjs.cloudflare.com/ https://cognito-idp.ca-central-1.amazonaws.com https://results-ques.netlify.app/api; default-src 'self'; font-src 'self' https://dq9dozspu8y40.cloudfront.net/20230404192231/; frame-src 'self' https://*.gov.bc.ca; img-src 'self' https://server.arcgisonline.com https://openmaps.gov.bc.ca https://maps.gov.bc.ca http://www.w3.org/ https://cdnjs.cloudflare.com/ https://www.google.ca/maps/ https://*.tile.openstreetmap.org/; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'unsafe-inline' 'report-sample' 'self' https://cdn.jsdelivr.net/npm/; script-src-elem 'unsafe-inline' 'report-sample' 'self' https://cdn.jsdelivr.net/npm/ https://dq9dozspu8y40.cloudfront.net/20230404192231/; style-src 'report-sample' 'self' https://cdn.jsdelivr.net/npm/ https://dq9dozspu8y40.cloudfront.net/; style-src-elem 'report-sample' 'self' https://cdn.jsdelivr.net/npm/ http://cdnjs.cloudflare.com/ https://dq9dozspu8y40.cloudfront.net/20230404192231/; worker-src 'none';"
26+
Content-Security-Policy "base-uri 'self'; connect-src 'self' https://*.gov.bc.ca https://*.apps.silver.devops.gov.bc.ca https://*.amazoncognito.com https://*.cloudfront.net https://cdnjs.cloudflare.com/ https://cognito-idp.ca-central-1.amazonaws.com https://results-ques.netlify.app/api; default-src 'self'; font-src 'self' https://dq9dozspu8y40.cloudfront.net/20230404192231/; frame-src 'self' https://*.gov.bc.ca; img-src 'self' https://server.arcgisonline.com https://openmaps.gov.bc.ca https://maps.gov.bc.ca http://www.w3.org/ https://cdnjs.cloudflare.com/ https://www.google.ca/maps/ https://*.tile.openstreetmap.org/; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'unsafe-inline' 'report-sample' 'self' https://cdn.jsdelivr.net/npm/; script-src-elem 'unsafe-inline' 'report-sample' 'self' https://cdn.jsdelivr.net/npm/ https://dq9dozspu8y40.cloudfront.net/20230404192231/; style-src 'report-sample' 'self' https://cdn.jsdelivr.net/npm/ https://dq9dozspu8y40.cloudfront.net/; style-src-elem 'report-sample' 'self' https://cdn.jsdelivr.net/npm/ http://cdnjs.cloudflare.com/ https://dq9dozspu8y40.cloudfront.net/20230404192231/; worker-src 'none';"
2727
Referrer-Policy "same-origin"
2828
}
2929
handle /env.js {

0 commit comments

Comments
 (0)