Merge pull request #102 from hmrc/DDCNLS-413

DDCNLS-413: Changed csp.
hmrc · Dec 6, 2016 · fd33dee · fd33dee
2 parents 8484c71 + f70ece2
commit fd33dee
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/conf/application.conf b/conf/application.conf
@@ -36,7 +36,7 @@ personal-allowance-2017 = 11500
 max-limit-2017 = 45000
 
 application.session.httpOnly=true
-play.filters.headers.contentSecurityPolicy= "default-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:9032 localhost:9250  webchat-dev.tax.service.gov.uk *.analytics-egain.com stats.g.doubleclick.net assets.digital.cabinet-office.gov.uk www.google-analytics.com data:"
+play.filters.headers.contentSecurityPolicy= "default-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:9032 localhost:9250 'script-src' webchat-dev.tax.service.gov.uk *.analytics-egain.com stats.g.doubleclick.net assets.digital.cabinet-office.gov.uk www.google-analytics.com data:"
 
 metrics {
     name = ${appName}.