Skip to content

Commit 894923a

Browse files
authored
DB22-4253: Update CSP for Recaptcha (#1007)
1 parent 48dbcf1 commit 894923a

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

compose/frontend/default.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,7 @@ server {
8787
add_header X-Robots-Tag "noindex";
8888

8989
# Add Content Security Policy header
90-
add_header Content-Security-Policy "default-src 'self' https://*.arcgis.com https://*.gov.bc.ca https://*.drivebc.ca data: https://*.flickr.com https://*.staticflickr.com https://www.youtube.com https://*.ytimg.com; script-src 'self' https://*.gov.bc.ca https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.flickr.com https://*.staticflickr.com 'unsafe-inline'; style-src 'self' https://*.flickr.com https://*.staticflickr.com 'unsafe-inline'; frame-src https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; frame-ancestors 'self'; form-action 'self' *.gov.bc.ca/ https://*.drivebc.ca";
90+
add_header Content-Security-Policy "default-src 'self' https://*.arcgis.com https://*.gov.bc.ca https://*.drivebc.ca https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ data: https://*.flickr.com https://*.staticflickr.com https://www.youtube.com https://*.ytimg.com; script-src 'self' https://*.gov.bc.ca https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.flickr.com https://*.staticflickr.com 'unsafe-inline'; style-src 'self' https://*.flickr.com https://*.staticflickr.com 'unsafe-inline'; frame-src https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; frame-ancestors 'self'; form-action 'self' *.gov.bc.ca/ https://*.drivebc.ca";
9191

9292
server_tokens off;
9393

0 commit comments

Comments
 (0)