Skip to content

Commit f1effe5

Browse files
authored
Add frontdoor bynder domain to csp (#3888)
1 parent 2cfb3ea commit f1effe5

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

etc/nginx.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ http {
3333
add_header X-Permitted-Cross-Domain-Policies "";
3434
add_header X-Frame-Options "deny";
3535
add_header Referrer-Policy "no-referrer-when-downgrade";
36-
add_header Content-Security-Policy "connect-src 'self' *.zesty.io *.a.run.app us-central1-zesty-dev.cloudfunctions.net us-central1-zesty-stage.cloudfunctions.net us-central1-zesty-prod.cloudfunctions.net *.sentry.io www.googleapis.com *.amplitude.com *.tiny.cloud *.getbynder.com *.bynder.com d8ejoa1fys2rk.cloudfront.net dam.redshieldtoolkit.org;";
36+
add_header Content-Security-Policy "connect-src 'self' *.zesty.io *.a.run.app us-central1-zesty-dev.cloudfunctions.net us-central1-zesty-stage.cloudfunctions.net us-central1-zesty-prod.cloudfunctions.net *.sentry.io www.googleapis.com *.amplitude.com *.tiny.cloud *.getbynder.com *.bynder.com d8ejoa1fys2rk.cloudfront.net dam.redshieldtoolkit.org brand.frontdoor.com;";
3737
# *.a.run.app - zesty cloudrun apps
3838
# d8ejoa1fys2rk.cloudfront.net - bynder modules
3939
# googleapis.com - google fonts

src/shell/webpack.config.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ module.exports = async (env) => {
5555
},
5656
headers: {
5757
"Content-Security-Policy":
58-
"connect-src 'self' *.zesty.io *.a.run.app us-central1-zesty-dev.cloudfunctions.net us-central1-zesty-stage.cloudfunctions.net us-central1-zesty-prod.cloudfunctions.net *.sentry.io www.googleapis.com *.amplitude.com *.tiny.cloud *.getbynder.com *.bynder.com d8ejoa1fys2rk.cloudfront.net dam.redshieldtoolkit.org;",
58+
"connect-src 'self' *.zesty.io *.a.run.app us-central1-zesty-dev.cloudfunctions.net us-central1-zesty-stage.cloudfunctions.net us-central1-zesty-prod.cloudfunctions.net *.sentry.io www.googleapis.com *.amplitude.com *.tiny.cloud *.getbynder.com *.bynder.com d8ejoa1fys2rk.cloudfront.net dam.redshieldtoolkit.org brand.frontdoor.com;",
5959
// *.a.run.app - zesty cloudrun apps
6060
// d8ejoa1fys2rk.cloudfront.net - bynder modules
6161
// googleapis.com - google fonts

0 commit comments

Comments
 (0)