AP-5415: Add url to content security policy so images will display

[agoldstone93]

What

Link to story

Add url to content security policy so images will display

Screenshot

Checklist

Before you ask people to review this PR:

• Tests and rubocop should be passing: bundle exec rake
• Github should not be reporting conflicts; you should have recently run git rebase main.
• The standards in the Git Workflow document on Confluence should be followed
• There should be no unnecessary whitespace changes. These make diffs harder to read and conflicts more likely.
• The PR description should say what you changed and why, with a link to the JIRA story.
• You should have looked at the diff against main and ensured that nothing unexpected is included in your changes.
• You should have checked that the commit messages say why the change was made.

[agoldstone93]

Does anyone know if these two lines are being used anywhere anymore or can be removed? Or know a way I can easily check this?

[colinbruce]

Know? No.
I suspect that these were the original locations of the images provided by Truelayer, why there are two of them? 🤷‍♂️
Maybe there was a test and production location?

[agoldstone93]

@colinbruce Yeah, I assumed the same thing - that that's the original location. I was trying to work out if it's safer to leave them in or remove them

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[colinbruce]

Paired on the subsequent docker update and approved to unblock deploys