GSA / GSA/resources.data.gov

Remove strategy.data.gov from CSP header in meta.html

Open
#987 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
HTML
Stars
81
Forks
133
Avg merge
1d 6h
Merged PRs (30d)
17

Description

## Summary

After images are migrated off strategy.data.gov, remove it from the Content Security Policy header in resources.data.gov.

## Background

`pages/_includes/meta.html` includes `https://strategy.data.gov` in the `img-src` directive of the Content Security Policy. Once the image migration in Ticket 2 is complete, this entry is no longer needed and should be removed to keep the CSP tight.

## Task

- [ ] Remove `https://strategy.data.gov` from the `img-src` directive in `pages/_includes/meta.html`

## Acceptance criteria

- [ ] `meta.html` CSP no longer references `strategy.data.gov`
- [ ] No console CSP errors on a preview build

## Depends on

Ticket 2

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.