6 Commits

Author	SHA1	Message	Date
Chris Hill-Scott	0cda624657	Add Google Analytics ... https://www.pivotaltracker.com/story/show/115861923 Makes some changes to the content security policy, to allow the Google Analytics JS and trakcing image to be loaded, copied from @alexmuller’s excellent work on GOV.UK: https://gdstechnology.blog.gov.uk/2015/02/12/experimenting-with-content-security-policy-on-gov-uk/ https://github.com/alphagov/frontend/pull/733	2016-03-18 15:06:37 +00:00
Chris Hill-Scott	fd54eeaeb7	Inline images in CSS ... Because this commit’s parent added a few new images, we are now serving at least a handful of images, therefore a few additional HTTP requests. It’s better to combine multiple HTTP requests into one for performance reasons (up to a point). This commit adds an extra step to the preprocessing of SASS files which takes any images it finds, base64 encodes them and inlines them into the distributed CSS files. It also modifies the content security policy to allow inline images.	2016-02-22 13:39:02 +00:00
Nicholas Staples	3b1d521c10	Tests added for dao.	2016-01-15 15:15:35 +00:00
Adam Shimali	9ce46c19cb	Add content security policy directive to allow loading of base64 encoded ... fonts.	2016-01-13 10:37:34 +00:00
Adam Shimali	886d0c8c95	Added content security policy header. ... unsafe-inline exception added to allow inline js scripts we have in base govuk_template.	2016-01-12 11:08:10 +00:00
Adam Shimali	78b8aed96b	Add some useful owasp suggested headers	2016-01-07 13:58:38 +00:00