From f70ece2b67fbbcfc19de67d961f9dad7b1738212 Mon Sep 17 00:00:00 2001
From: Periklis <periklas@hotmail.com>
Date: Tue, 6 Dec 2016 13:53:06 +0000
Subject: [PATCH] DDCNLS-413: Changed csp.

---
 conf/application.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf/application.conf b/conf/application.conf
index 718addad..a25d20a7 100644
--- a/conf/application.conf
+++ b/conf/application.conf
@@ -36,7 +36,7 @@ personal-allowance-2017 = 11500
 max-limit-2017 = 45000
 
 application.session.httpOnly=true
-play.filters.headers.contentSecurityPolicy= "default-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:9032 localhost:9250  webchat-dev.tax.service.gov.uk *.analytics-egain.com stats.g.doubleclick.net assets.digital.cabinet-office.gov.uk www.google-analytics.com data:"
+play.filters.headers.contentSecurityPolicy= "default-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:9032 localhost:9250 'script-src' webchat-dev.tax.service.gov.uk *.analytics-egain.com stats.g.doubleclick.net assets.digital.cabinet-office.gov.uk www.google-analytics.com data:"
 
 metrics {
     name = ${appName}.