Merge pull request #336 from alphagov/revert-csp-change-ash

Revert "Add GOVUK domains to script src CSP"
alphagov · Dec 21, 2023 · 775358a · 775358a
2 parents bba0e4b + 1416331
commit 775358a
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,7 @@
+# 9.8.1
+
+* Revert "Add GOVUK domains to script src CSP" ([#336](https://github.com/alphagov/govuk_app_config/pull/336))
+
 # 9.8.0
 
 * Add GOVUK domains to script src CSP ([#334](https://github.com/alphagov/govuk_app_config/pull/334))

diff --git a/lib/govuk_app_config/govuk_content_security_policy.rb b/lib/govuk_app_config/govuk_content_security_policy.rb
@@ -51,7 +51,6 @@ def self.build_policy(policy)
     policy.script_src :self,
                       *GOOGLE_ANALYTICS_DOMAINS,
                       *GOOGLE_STATIC_DOMAINS,
-                      *GOVUK_DOMAINS,
                       # Allow YouTube Embeds (Govspeak turns YouTube links into embeds)
                       "*.ytimg.com",
                       "www.youtube.com",

diff --git a/lib/govuk_app_config/version.rb b/lib/govuk_app_config/version.rb
@@ -1,3 +1,3 @@
 module GovukAppConfig
-  VERSION = "9.8.0".freeze
+  VERSION = "9.8.1".freeze
 end