Merge branch 'main' into PIMS-2233

bcgov · Nov 13, 2024 · 32d9b0c · 32d9b0c
2 parents 92e65c6 + a6ee2da
commit 32d9b0c
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/react-app/nginx.conf b/react-app/nginx.conf
@@ -19,7 +19,19 @@ server {
   add_header Pragma "no-cache";
 
   # Content Security Policy
-  add_header Content-Security-Policy "default-src 'none'; frame-src 'self' *.gov.bc.ca; script-src 'nonce-windowsp' 'self' *.gov.bc.ca https://unpkg.com; style-src 'self' 'unsafe-inline' https://unpkg.com https://cdnjs.cloudflare.com; font-src 'self' *.gov.bc.ca; img-src 'self' *.gov.bc.ca data: tile.openstreetmap.org https://maps.googleapis.com https://unpkg.com https://cdnjs.cloudflare.com https://openmaps.gov.bc.ca; connect-src 'self' *.gov.bc.ca https://openmaps.gov.bc.ca; manifest-src 'self';";
+  add_header Content-Security-Policy "
+    default-src 'none';
+    base-uri 'self';
+    frame-ancestors 'none';
+    script-src 'self' https://unpkg.com;
+    style-src 'self' 'unsafe-inline' https://unpkg.com https://cdnjs.cloudflare.com;
+    font-src 'self';
+    img-src 'self' data: tile.openstreetmap.org https://maps.googleapis.com https://unpkg.com https://cdnjs.cloudflare.com https://openmaps.gov.bc.ca https://server.arcgisonline.com;
+    connect-src 'self' https://openmaps.gov.bc.ca;
+    manifest-src 'self';
+    form-action 'self'; 
+  ";
+
 
   listen 3000;
   location / {