adding react-helmet for csp

bcgov · May 1, 2024 · 8179c35 · 8179c35
1 parent b842ff7
commit 8179c35
Show file tree

Hide file tree

Showing 4 changed files with 41 additions and 2 deletions.
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
diff --git a/frontend/package.json b/frontend/package.json
@@ -24,6 +24,7 @@
     "react-bootstrap": "^2.10.1",
     "react-datepicker": "^6.6.0",
     "react-dom": "^18.2.0",
+    "react-helmet-async": "^2.0.4",
     "react-loading-skeleton": "^3.4.0",
     "react-redux": "^9.0.4",
     "react-router-dom": "^6.22.1",

diff --git a/frontend/src/app/content/pages/ManageTemplatesPage.tsx b/frontend/src/app/content/pages/ManageTemplatesPage.tsx
@@ -5,6 +5,7 @@ import { DocType } from '../../types/types';
 import UploadTemplateModal from '../../components/modal/manage-templates/UploadTemplateModal';
 import RemoveTemplateModal from '../../components/modal/manage-templates/RemoveTemplateModal';
 import { getDocumentTypes } from '../../common/report';
+import { Helmet } from 'react-helmet-async';
 
 const ManageTemplatesPage: FC = () => {
   const [showUploadModal, setShowUploadModal] = useState<boolean>(false);
@@ -50,6 +51,14 @@ const ManageTemplatesPage: FC = () => {
 
   return (
     <>
+      <Helmet>
+        <meta
+          httpEquiv="Content-Security-Policy"
+          content={`
+        frame-src https://*.gov.bc.ca blob:;
+      `}
+        ></meta>
+      </Helmet>
       <h1>Manage Templates</h1>
       <hr />
       <div className="col-md-3">
@@ -61,7 +70,8 @@ const ManageTemplatesPage: FC = () => {
             id="reportTypes"
             style={{ minWidth: '200px' }}
             className="border border-1 rounded pl-2 ml-4"
-            onChange={selectedDocTypeHandler}>
+            onChange={selectedDocTypeHandler}
+          >
             {allDocTypes.map((docType) => (
               <option key={docType.id} value={docType.id}>
                 {docType.name}

diff --git a/frontend/src/index.tsx b/frontend/src/index.tsx
@@ -5,14 +5,17 @@ import App from './app/App';
 import './app/App.css';
 import reportWebVitals from './reportWebVitals';
 import UserService from './app/service/user-service';
+import { HelmetProvider } from 'react-helmet-async';
 
 const container = document.getElementById('root')!;
 const root = createRoot(container);
 
 const onAuthenticatedCallback = () =>
   root.render(
     <StrictMode>
-      <App />
+      <HelmetProvider>
+        <App />
+      </HelmetProvider>
     </StrictMode>
   );