@eeacms/volto-marine-policy 2.0.28 → 2.0.29

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -4,7 +4,13 @@ All notable changes to this project will be documented in this file. Dates are d
4
4
 
5
5
  Generated by [`auto-changelog`](https://github.com/CookPete/auto-changelog).
6
6
 
7
- ### [2.0.28](https://github.com/eea/volto-marine-policy/compare/2.0.27...2.0.28) - 11 September 2025
7
+ ### [2.0.29](https://github.com/eea/volto-marine-policy/compare/2.0.28...2.0.29) - 22 September 2025
8
+
9
+ #### :hammer_and_wrench: Others
10
+
11
+ - cleanup [laszlocseh - [`2d9cd7c`](https://github.com/eea/volto-marine-policy/commit/2d9cd7c4e37f36c92e0ecc604812cd7ee9703ec7)]
12
+ - add nonce to script-src [laszlocseh - [`a35b6f5`](https://github.com/eea/volto-marine-policy/commit/a35b6f5f31d9cdc7039ef43c52b0efb37397b679)]
13
+ ### [2.0.28](https://github.com/eea/volto-marine-policy/compare/2.0.27...2.0.28) - 12 September 2025
8
14
 
9
15
  #### :house: Internal changes
10
16
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@eeacms/volto-marine-policy",
3
- "version": "2.0.28",
3
+ "version": "2.0.29",
4
4
  "description": "@eeacms/volto-marine-policy: Volto add-on",
5
5
  "main": "src/index.js",
6
6
  "author": "European Environment Agency: IDM2 A-Team",
package/src/index.js CHANGED
@@ -98,6 +98,14 @@ const applyConfig = (config) => {
98
98
  if (__SERVER__) {
99
99
  const installExpressMiddleware = require('./express-middleware').default;
100
100
  config = installExpressMiddleware(config);
101
+
102
+ // CSP Header
103
+ const devsource = __DEVELOPMENT__
104
+ ? ` http://localhost:${parseInt(process.env.PORT || '3000') + 1}`
105
+ : '';
106
+ config.settings.serverConfig.csp = {
107
+ 'script-src': `'self' {nonce}${devsource}`,
108
+ };
101
109
  }
102
110
 
103
111
  config.widgets.widget.text_align = TextAlignWidget;