From 6658d8ce709de5e1f6df7bdc23b78ea6610a31ae Mon Sep 17 00:00:00 2001 From: Jesper Paulsen Date: Thu, 8 Feb 2024 09:32:54 +0100 Subject: [PATCH] [OPP-1580] Legge til cdn.nav.no til CSP --- .nais/qa-template.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.nais/qa-template.yaml b/.nais/qa-template.yaml index 5c1423205..4f404d5e5 100644 --- a/.nais/qa-template.yaml +++ b/.nais/qa-template.yaml @@ -59,10 +59,10 @@ spec: value: "https://unleash.nais.io/api/" - name: CSP_DIRECTIVES value: "default-src 'self';\ - script-src 'self' 'unsafe-inline' jsagent.adeo.no https://*.hotjar.com https://*.hotjar.io;\ - style-src 'self' 'unsafe-inline';\ + script-src 'self' 'unsafe-inline' jsagent.adeo.no https://*.hotjar.com https://*.hotjar.io https://cdn.nav.no;\ + style-src 'self' 'unsafe-inline' https://cdn.nav.no;\ img-src 'self' data: https://*.hotjar.com https://*.hotjar.io;\ - font-src 'self' data: https://*.hotjar.com https://*.hotjar.io;\ + font-src 'self' data: https://*.hotjar.com https://*.hotjar.io https://cdn.nav.no;\ connect-src 'self' eumgw.adeo.no wss://veilederflatehendelser-{{ q_env }}.adeo.no https://*.hotjar.com https://*.hotjar.io sentry.gc.nav.no;\ object-src blob:;\ frame-src blob: https://*.hotjar.com https://*.hotjar.io;\