Add contentful to content security policy

DFE-Digital · Oct 31, 2023 · f8afcc2 · f8afcc2
1 parent 104bf6c
commit f8afcc2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb
@@ -41,6 +41,7 @@
   policy.font_src    :self, :https, *GOVUK_DOMAINS, *GOOGLE_STATIC_DOMAINS, :data
   policy.frame_src   :self, *GOOGLE_ANALYTICS_DOMAINS, *OPTIMIZE_DOMAINS
   policy.img_src     :self,
+                     "images.ctfassets.net",
                      *GOVUK_DOMAINS,
                      *S3_DOMAINS,
                      *GOOGLE_ANALYTICS_DOMAINS, # Tracking pixels