fix for ga script source

DFE-Digital · Jul 16, 2024 · b72d939 · b72d939
1 parent c4b2d1b
commit b72d939
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/Dfe.PrepareConversions/Dfe.PrepareConversions/Security/SecureHeadersDefinitions.cs b/Dfe.PrepareConversions/Dfe.PrepareConversions/Security/SecureHeadersDefinitions.cs
@@ -31,15 +31,18 @@ public static HeaderPolicyCollection GetHeaderPolicyCollection(bool isDev)
          {
             builder.AddObjectSrc().None();
             builder.AddBlockAllMixedContent();
-            builder.AddImgSrc().Self().From("data:").From(GoogleAnalyticsUri)
+            builder.AddImgSrc().Self()
+               .From("data:")
+               .From(GoogleAnalyticsUri)
                .From(GoogleTagManagerUri);
             builder.AddFormAction().Self();
             builder.AddFormAction().OverHttps();
             builder.AddFontSrc().Self();
             builder.AddStyleSrc().Self();
             builder.AddBaseUri().Self();
-            builder.AddScriptSrc().From(GoogleTagManagerUri).UnsafeInline().WithNonce();
-            builder.AddScriptSrc().From(ApplicationInsightsUri).UnsafeInline().WithNonce();
+            builder.AddScriptSrc()
+               .From(GoogleTagManagerUri)
+               .From(ApplicationInsightsUri).UnsafeInline().WithNonce();
             builder.AddFrameAncestors().None();
          })
          .AddPermissionsPolicy(builder =>