fix(csp): add exceptions for ANDI A11y Tool #8542
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Changes: - Add exceptions for ANDI A11y Tool to the Content Security Policy - ANDI scripts and the jquery version it uses - ANDI css styles - ANDI images for its icons
wpears
approved these changes
Aug 26, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
We helped the ITAP team over in RegTech make some exceptions to our CSP during testing so they could use the ANDI accessibility tool for their accessibility audits, and they were hoping they could also run it on cf.gov. This PR adds the few CSP tweaks they need for the tool to start working.
You can see the current CSP issues by following the "How to test this PR" steps or take a peek at the screenshots.
Closes #8541
Notes and todos
Test this out in a dev environmentHave someone from ITAP confirm that it's working as expectedTalk to someone from D+D about the Akamai shenanigans that need to be done before this change could go liveChecked with Wyatt about the CSPAdditions
How to test this PR
Screenshots
Before
After