adjustment

mbta · Nov 25, 2024 · 1404597 · 1404597
1 parent a77dde6
commit 1404597
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/lib/dotcom_web/plugs/secure_headers.ex b/lib/dotcom_web/plugs/secure_headers.ex
@@ -53,8 +53,6 @@ defmodule DotcomWeb.Plugs.SecureHeaders do
     script: ~w[
       script-src
       'nonce-{NONCE}'
-      'self'
-      'strict-dynamic'
       'unsafe-inline'
       *.arcgis.com
       *.google.com
@@ -67,6 +65,7 @@ defmodule DotcomWeb.Plugs.SecureHeaders do
       www.google-analytics.com
       www.gstatic.com
       https://*.googletagmanager.com
+      'self'
     ],
     style: ~w[style-src 'self' 'unsafe-inline' www.gstatic.com],
     require: ~w[require-trusted-types-for 'script'],