Merge branch 'DIGG-456' into dev

diggsweden · Oct 18, 2024 · 7e0505d · 7e0505d
2 parents 2ca50ef + ecb0374
commit 7e0505d
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/utilities/generateCsp.ts b/utilities/generateCsp.ts
@@ -53,9 +53,9 @@ const generateCSP = ({ nonce }: generateCSPProps = {}) => {
   );
   add(
     "font-src",
-    `'self' data: https://static.entryscape.com https://static.cdn.entryscape.com`,
+    `'self' data: https://static.entryscape.com https://static.cdn.entryscape.com https://webbanalys-dashboard.digg.se`,
   );
-  add("base-uri", `'self' https://webbanalys-dashboard.digg.se/`);
+  add("base-uri", `'self' https://webbanalys-dashboard.digg.se`);
   add("manifest-src", `'self'`);
   add("form-action", `'self'`);
   add(
@@ -70,18 +70,18 @@ const generateCSP = ({ nonce }: generateCSPProps = {}) => {
   );
   add(
     "style-src",
-    `'self' 'unsafe-inline' https://cdn.screen9.com/players/amber-player.css`,
+    `'self' 'unsafe-inline' https://cdn.screen9.com/players/amber-player.css https://webbanalys-dashboard.digg.se`,
   );
   add(
     "style-src-elem",
-    `'self' 'unsafe-inline' https://cdn.screen9.com/players/amber-player.css`,
+    `'self' 'unsafe-inline' https://cdn.screen9.com/players/amber-player.css https://webbanalys-dashboard.digg.se`,
   );
   add("style-src-attr", `'self' 'unsafe-inline'`);
   add(
     "connect-src",
     `'self' https://* http://127.0.0.1:1300/ https://admin.dataportal.se https://editera.dataportal.se https://webbanalys.digg.se ${
       reactEnv("APOLLO_URL") || ""
-    } https://* webbanalys.digg.se webbanalys-dashboard.digg.se statsapi.screen9.com`,
+    } https://* webbanalys.digg.se statsapi.screen9.com`,
   );
 
   // Return the object in a formatted value