Merge pull request #142 from hmrc/DDCNLS-1917

Optimizely - Added frame-src
hmrc · Sep 11, 2017 · 17a2490 · 17a2490
2 parents 6601765 + 76f4bf7
commit 17a2490
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/conf/application.conf b/conf/application.conf
@@ -41,7 +41,7 @@ template-amazon-s3-port = 9310
 template-amazon-s3-protocol = "http"
 
 
-play.filters.headers.contentSecurityPolicy = "default-src 'self' frame-src 'unsafe-inline' 'unsafe-eval' localhost:9310 localhost:9032 localhost:9250 'script-src' webchat-dev.tax.service.gov.uk analytics.analytics-egain.com *.analytics-egain.com stats.g.doubleclick.net assets.digital.cabinet-office.gov.uk www.google-analytics.com cdn.optimizely.com 8421482974.log.optimizely.com app.optimizely.com *.optimizely.com optimizely.s3.amazonaws.com data:"
+play.filters.headers.contentSecurityPolicy = "default-src 'self' 'frame-src' 'unsafe-inline' 'unsafe-eval' localhost:9310 localhost:9032 localhost:9250 'script-src' webchat-dev.tax.service.gov.uk analytics.analytics-egain.com *.analytics-egain.com stats.g.doubleclick.net assets.digital.cabinet-office.gov.uk www.google-analytics.com cdn.optimizely.com 8421482974.log.optimizely.com app.optimizely.com *.optimizely.com optimizely.s3.amazonaws.com data:"
 application.session.httpOnly=true
 
 metrics {