Merge pull request #2861 from GSA/2859-csp-notices---daily-scans

daily scan fix CSP duplicate host warning
2026-05-27 17:39:51 -04:00 · 2025-08-26 11:20:44 -04:00
parent 9e2dc55500 a797e44874
commit 0c63c4620e
1 changed files with 2 additions and 2 deletions
--- a/app/init.py
+++ b/app/init.py
@@ -170,13 +170,13 @@ def _csp(config):
            "https://dap.digitalgov.gov",
            "https://cdn.socket.io",
        ],
-        "connect-src": [
+        "connect-src": list(dict.fromkeys([
            "'self'",
            "https://gov-bam.nr-data.net",
            "https://www.google-analytics.com",
            f"{api_public_url}",
            f"{api_public_ws_url}",
-        ],
+        ])),
        "style-src": ["'self'", asset_domain],
        "img-src": ["'self'", asset_domain],
    }