add dps to form-action csp directive

ministryofjustice · Oct 30, 2023 · 16fcb84 · 16fcb84
1 parent 5efc97b
commit 16fcb84
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/server/app.ts b/server/app.ts
@@ -98,6 +98,7 @@ export default function createApp(services: Services): Express {
           // Hash allows inline script pulled in from https://github.com/alphagov/govuk-frontend/blob/master/src/govuk/template.njk
           scriptSrc,
           imgSrc,
+          formAction: [`'self' ${config.apis.digitalPrisonServiceUrl}`],
           connectSrc,
           styleSrc,
           fontSrc,