Merge pull request #962 from alphagov/re-add-analytics

Re-add Google Analytics
This commit is contained in:
Chris Hill-Scott
2016-10-05 14:49:01 +01:00
committed by GitHub
3 changed files with 16 additions and 4 deletions

View File

@@ -8,8 +8,8 @@ def test_owasp_useful_headers_set(app_):
assert response.headers['X-XSS-Protection'] == '1; mode=block'
assert response.headers['Content-Security-Policy'] == (
"default-src 'self' 'unsafe-inline';"
"script-src 'self' 'unsafe-inline' 'unsafe-eval' data:;"
"script-src 'self' *.google-analytics.com 'unsafe-inline' 'unsafe-eval' data:;"
"object-src 'self';"
"font-src 'self' data:;"
"img-src 'self' *.notifications.service.gov.uk data:;"
"img-src 'self' *.google-analytics.com *.notifications.service.gov.uk data:;"
)