Revert "Add GOVUK domains to script src CSP"

This reverts commit b30410c. We thought it would solve a CORS issue, but it did not so we don't need this change.
alphagov · Dec 21, 2023 · 22230ef · 22230ef
1 parent bba0e4b
commit 22230ef
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/lib/govuk_app_config/govuk_content_security_policy.rb b/lib/govuk_app_config/govuk_content_security_policy.rb
@@ -51,7 +51,6 @@ def self.build_policy(policy)
     policy.script_src :self,
                       *GOOGLE_ANALYTICS_DOMAINS,
                       *GOOGLE_STATIC_DOMAINS,
-                      *GOVUK_DOMAINS,
                       # Allow YouTube Embeds (Govspeak turns YouTube links into embeds)
                       "*.ytimg.com",
                       "www.youtube.com",