Change crossorigin from 'anonymous' to 'use-credentials'

alphagov · Jan 7, 2020 · eefe3a5 · eefe3a5
1 parent fb9fec0
commit eefe3a5
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/app/views/layouts/application.html.erb b/app/views/layouts/application.html.erb
@@ -13,13 +13,13 @@
     <meta name="robots" content="noindex, nofollow">
   <% end %>
 
-  <%= stylesheet_link_tag "application", integrity: true, crossorigin: 'anonymous' %>
+  <%= stylesheet_link_tag "application", integrity: true, crossorigin: 'use-credentials' %>
   <% if Rails.env.test? && params[:medium] == 'print' %>
-    <%= stylesheet_link_tag "print.css", :media => "screen", integrity: true, crossorigin: 'anonymous' %>
+    <%= stylesheet_link_tag "print.css", :media => "screen", integrity: true, crossorigin: 'use-credentials' %>
   <% else %>
-    <%= stylesheet_link_tag "print.css", :media => "print", integrity: true, crossorigin: 'anonymous' %>
+    <%= stylesheet_link_tag "print.css", :media => "print", integrity: true, crossorigin: 'use-credentials' %>
   <% end %>
-  <%= javascript_include_tag "application", integrity: true, crossorigin: 'anonymous' %>
+  <%= javascript_include_tag "application", integrity: true, crossorigin: 'use-credentials' %>
   <%= csrf_meta_tags %>
   <%= render 'govuk_publishing_components/components/meta_tags', content_item: @content_item.content_item %>
 

diff --git a/app/views/shared/_webchat.html.erb b/app/views/shared/_webchat.html.erb
@@ -25,4 +25,4 @@
   </span>
 </p>
 <% # This is inline in the source however slimmer will optimize this. %>
-<%= javascript_include_tag "webchat", integrity: true, crossorigin: 'anonymous' %>
+<%= javascript_include_tag "webchat", integrity: true, crossorigin: 'use-credentials' %>