From 258ae4d1b81034e9fe15c025a3357c9f6b83e746 Mon Sep 17 00:00:00 2001 From: Corey Date: Wed, 21 Jul 2021 09:19:01 +0100 Subject: [PATCH] enable unsafe eval in csp header to test GTM CSP issues. --- src/Employer/Employer.Web/Startup.Configure.cs | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/src/Employer/Employer.Web/Startup.Configure.cs b/src/Employer/Employer.Web/Startup.Configure.cs index 66815ed08b..c7ccfdd5e5 100644 --- a/src/Employer/Employer.Web/Startup.Configure.cs +++ b/src/Employer/Employer.Web/Startup.Configure.cs @@ -91,7 +91,7 @@ public void Configure(IApplicationBuilder app, IHostingEnvironment env, IOptions "*.googletagmanager.com/", "*.postcodeanywhere.co.uk/", "https://tagmanager.google.com", - "https://www.tagmanager.google.com/", + "https://www.tagmanager.google.com/", "https://*.zdassets.com", "https://*.zendesk.com", "wss://*.zendesk.com", @@ -101,11 +101,7 @@ public void Configure(IApplicationBuilder app, IHostingEnvironment env, IOptions //Google tag manager uses inline scripts when administering tags s.UnsafeInline(); - - if (env.IsEnvironment(EnvironmentNames.PREPROD)) - { - s.UnsafeEval(); - } + s.UnsafeEval(); }) .FontSources(s => s.Self()