Revert "feat: Enable CSP with nonce (#776)" (#779)

andreituicu · web-flow · commit c2ba3c5cf71d · 2025-02-13T11:23:19.000-08:00
This reverts commit 4d95f3b.
diff --git a/404.html b/404.html
@@ -2,20 +2,15 @@
 <html>
 
 <head>
-  <meta
-    http-equiv="Content-Security-Policy"
-    content="script-src 'nonce-aem' 'strict-dynamic'; base-uri 'self'; object-src 'none';"
-    move-as-header="true"
-  >
   <title>Page not found</title>
-  <script nonce="aem" type="text/javascript">
+  <script type="text/javascript">
     window.isErrorPage = true;
     window.errorCode = '404';
   </script>
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <meta property="og:title" content="Page not found">
-  <script nonce="aem" src="/scripts/scripts.js" type="module" crossorigin="use-credentials"></script>
-  <script nonce="aem" type="module">
+  <script src="/scripts/scripts.js" type="module" crossorigin="use-credentials"></script>
+  <script type="module">
     window.addEventListener('load', () => {
       if (document.referrer) {
         const { origin, pathname } = new URL(document.referrer);
@@ -31,7 +26,7 @@
       }
     });
   </script>
-  <script nonce="aem" type="module">
+  <script type="module">
     import { sampleRUM } from '/scripts/lib-franklin.js';
     import { applyRedirects } from '/scripts/redirects.js';
     await applyRedirects();
diff --git a/head.html b/head.html
@@ -1,11 +1,6 @@
 <!-- v7 -->
-<meta
-  http-equiv="Content-Security-Policy"
-  content="script-src 'nonce-aem' 'strict-dynamic'; base-uri 'self'; object-src 'none';"
-  move-as-header="true"
->
 <meta name="viewport" content="width=device-width, initial-scale=1"/>
-<script nonce="aem" src="/scripts/lib-franklin.js" type="module"></script>
-<script nonce="aem" src="/scripts/scripts.js" type="module"></script>
-<script nonce="aem" src="/scripts/indexing-test.js?date=2024-08-16" type="module"></script>
-<link rel="stylesheet" href="/styles/styles.css"/>
+<script src="/scripts/lib-franklin.js" type="module"></script>
+<script src="/scripts/scripts.js" type="module"></script>
+<script src="/scripts/indexing-test.js?date=2024-08-16" type="module"></script>
+<link rel="stylesheet" href="/styles/styles.css"/>
