govuk_app_config 4.2.0 → 4.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +4 -0
- data/lib/govuk_app_config/govuk_content_security_policy.rb +1 -7
- data/lib/govuk_app_config/version.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 6c537dcfbb4c9d9f5c3780934fd66b9a31d0e9dade0b9972b837650ab99c69f4
|
|
4
|
+
data.tar.gz: cc4db9f009c6a15015d3c06e1a765d96f6ae28873ff5540a05168954df83414a
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: d9c3ad899bd4e81c750e809adc50dc8e094cb89cabb6641a7ba75b7840c56c91a4cae43c1f2291031f21b1c92fccce527ee34eb34b15601cc4c52ce7adee5aed
|
|
7
|
+
data.tar.gz: 940fca52216b248625ef93aac95198c20df19bda11d98bd5195a42e4921ad12739d56d966dd35343ee48f2f7d5b1802a8d7cb1562933fa835c9d8e11fd04dd65
|
data/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,7 @@
|
|
|
1
|
+
# 4.3.0
|
|
2
|
+
|
|
3
|
+
- Remove Speedcurve's LUX from the connect-src policy ([#216](https://github.com/alphagov/govuk_app_config/pull/216)).
|
|
4
|
+
|
|
1
5
|
# 4.2.0
|
|
2
6
|
|
|
3
7
|
- Add pluralisation rules for Azerbaijani, Persian, Georgian, and Turkish. ([#219](https://github.com/alphagov/govuk_app_config/pull/219))
|
|
@@ -78,13 +78,7 @@ module GovukContentSecurityPolicy
|
|
|
78
78
|
# Allow JSON call to klick2contact - HMPO web chat provider
|
|
79
79
|
"hmpowebchat.klick2contact.com",
|
|
80
80
|
# Allow connecting to Verify to check whether the user is logged in
|
|
81
|
-
"www.signin.service.gov.uk"
|
|
82
|
-
# Allow connection to Speedcurve's CDN for LUX - used for
|
|
83
|
-
# real user metrics on GOV.UK. This loads using an image
|
|
84
|
-
# (see image policy), but returns a JavaScript file -
|
|
85
|
-
# which is why this has to be added to the `connect-src`
|
|
86
|
-
# policy as well.
|
|
87
|
-
"lux.speedcurve.com"
|
|
81
|
+
"www.signin.service.gov.uk"
|
|
88
82
|
|
|
89
83
|
# Disallow all <object>, <embed>, and <applet> elements
|
|
90
84
|
#
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: govuk_app_config
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 4.
|
|
4
|
+
version: 4.3.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- GOV.UK Dev
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: exe
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2022-01
|
|
11
|
+
date: 2022-02-01 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: logstasher
|