fix: resolve csp to allow images and data to come from esri sources

bcgov · May 11, 2024 · c2d2eb3 · c2d2eb3
1 parent 5c3e5f6
commit c2d2eb3
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/frontend/Caddyfile b/frontend/Caddyfile
@@ -40,6 +40,7 @@
 			default-src 
 				'self' 
 				https://spt.apps.gov.bc.ca 
+				https://*.arcgis.com
 				data:; 
 			script-src 
 				'self' 
@@ -54,7 +55,13 @@
 				https://fonts.gstatic.com; 
 			img-src 
 				'self' 
-				data: https://fonts.googleapis.com http://www.w3.org https://*.gov.bc.ca https://*.openstreetmap.org
+				data: 
+				https://fonts.googleapis.com 
+				http://www.w3.org 
+				https://*.gov.bc.ca 
+				https://*.openstreetmap.org
+				http://*.arcgisonline.com
+				https://*.arcgis.com;
 			"
 		Referrer-Policy "same-origin"
 		Feature-Policy "fullscreen 'self'; camera 'none'; microphone 'none'"