PI-2446: Changed connect source for ZAP issue

ministryofjustice · Sep 3, 2024 · d3a761d · d3a761d
1 parent fa5417a
commit d3a761d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/middleware/setUpWebSecurity.ts b/server/middleware/setUpWebSecurity.ts
@@ -28,7 +28,7 @@ export default function setUpWebSecurity(): Router {
             "'self' https://browser.sentry-cdn.com https://js.sentry-cdn.com",
             (_req: Request, res: Response) => `'nonce-${res.locals.cspNonce}'`,
           ],
-          connectSrc: ["'self' https://*.sentry.io"],
+          connectSrc: ["'self' *.sentry.io"],
           workerSrc: ["'self' blob:"],
           styleSrc: ["'self'", (_req: Request, res: Response) => `'nonce-${res.locals.cspNonce}'`],
           fontSrc: ["'self'"],