[OPP-1580] Legge til cdn.nav.no til CSP

navikt · Feb 8, 2024 · 6658d8c · 6658d8c
1 parent a88aeb5
commit 6658d8c
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.nais/qa-template.yaml b/.nais/qa-template.yaml
@@ -59,10 +59,10 @@ spec:
       value: "https://unleash.nais.io/api/"
     - name: CSP_DIRECTIVES
       value: "default-src 'self';\
-      script-src 'self' 'unsafe-inline' jsagent.adeo.no https://*.hotjar.com https://*.hotjar.io;\
-      style-src 'self' 'unsafe-inline';\
+      script-src 'self' 'unsafe-inline' jsagent.adeo.no https://*.hotjar.com https://*.hotjar.io https://cdn.nav.no;\
+      style-src 'self' 'unsafe-inline' https://cdn.nav.no;\
       img-src 'self' data: https://*.hotjar.com https://*.hotjar.io;\
-      font-src 'self' data: https://*.hotjar.com https://*.hotjar.io;\
+      font-src 'self' data: https://*.hotjar.com https://*.hotjar.io https://cdn.nav.no;\
       connect-src 'self' eumgw.adeo.no wss://veilederflatehendelser-{{ q_env }}.adeo.no https://*.hotjar.com https://*.hotjar.io sentry.gc.nav.no;\
       object-src blob:;\
       frame-src blob: https://*.hotjar.com https://*.hotjar.io;\