feat: Update CSP header for

GemeenteNijmegen · Sep 17, 2024 · ffb8071 · ffb8071
1 parent 100c60b
commit ffb8071
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/CloudfrontStack.ts b/src/CloudfrontStack.ts
@@ -299,6 +299,7 @@ export class CloudfrontStack extends Stack {
     const cspValues = [
       'default-src \'self\';',
       'frame-ancestors \'none\';',
+      'base-uri \'self\';',
       'frame-src \'self\';',
       `connect-src \'self\' https://componenten.nijmegen.nl https://${yiviHost};`,
       'style-src \'self\' https://componenten.nijmegen.nl https://fonts.googleapis.com https://fonts.gstatic.com \'sha256-hS1LM/30PjUBJK3kBX9Vm9eOAhQNCiNhf/SCDnUqu14=\' \'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=\' \'sha256-OTeu7NEHDo6qutIWo0F2TmYrDhsKWCzrUgGoxxHGJ8o=\';',