Remove unsafe inline in CSP policy and update svg fill (#1349)

ONSdigital · Apr 11, 2024 · a2e758e · a2e758e
1 parent 618c717
commit a2e758e
Show file tree

Hide file tree

Showing 7 changed files with 13 additions and 17 deletions.
diff --git a/app/setup.py b/app/setup.py
@@ -62,11 +62,7 @@
         "'self'",
         "https://*.googletagmanager.com",
     ],
-    "style-src": [
-        "'self'",
-        "https://fonts.googleapis.com",
-        "'unsafe-inline'",
-    ],
+    "style-src": ["'self'", "https://fonts.googleapis.com"],
     "connect-src": [
         "'self'",
         "https://*.google-analytics.com",

diff --git a/templates/assets/images/dbt-logo-stacked.svg b/templates/assets/images/dbt-logo-stacked.svg
diff --git a/templates/assets/images/dsit-logo-stacked.svg b/templates/assets/images/dsit-logo-stacked.svg