darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-11 10:28:41 -04:00
Code Issues Packages Projects Releases Wiki Activity

1004 - Adding GA to connect-src

Browse Source
This commit is contained in:
Jonathan Bobel
2023-12-13 08:50:25 -05:00
parent 42eca53f77
commit 6297091022
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/__init__.py
+5 -1
View File
@@ -153,7 +153,11 @@ def _csp(config):
"https://www.google-analytics.com", "https://www.google-analytics.com",
"https://dap.digitalgov.gov", "https://dap.digitalgov.gov",
], ],
"connect-src": ["'self'", "https://gov-bam.nr-data.net"], "connect-src": [
"'self'",
"https://gov-bam.nr-data.net",
"https://www.google-analytics.com",
],
"style-src": ["'self'", asset_domain], "style-src": ["'self'", asset_domain],
"img-src": ["'self'", asset_domain, logo_domain], "img-src": ["'self'", asset_domain, logo_domain],
} }
tests/app/main/views/test_headers.py
+5 -1
View File
@@ -23,6 +23,10 @@ def test_owasp_useful_headers_set(
r"gov 'nonce-.*';", r"gov 'nonce-.*';",
csp, csp,
) )
assert search(r"connect-src 'self' https:\/\/gov-bam.nr-data\.net;", csp) assert search(
r"connect-src 'self' https:\/\/gov-bam.nr-data\.net https:\/\/www\.google-analytics\."
r"com;",
csp,
)
assert search(r"style-src 'self' static\.example\.com 'nonce-.*';", csp) assert search(r"style-src 'self' static\.example\.com 'nonce-.*';", csp)
assert search(r"img-src 'self' static\.example\.com static-logos\.test\.com", csp) assert search(r"img-src 'self' static\.example\.com static-logos\.test\.com", csp)