Summary
After images are migrated off strategy.data.gov, remove it from the Content Security Policy header in resources.data.gov.
Background
pages/_includes/meta.html includes https://strategy.data.gov in the img-src directive of the Content Security Policy. Once the image migration in Ticket 2 is complete, this entry is no longer needed and should be removed to keep the CSP tight.
Task
Acceptance criteria
Depends on
Ticket 2
Summary
After images are migrated off strategy.data.gov, remove it from the Content Security Policy header in resources.data.gov.
Background
pages/_includes/meta.htmlincludeshttps://strategy.data.govin theimg-srcdirective of the Content Security Policy. Once the image migration in Ticket 2 is complete, this entry is no longer needed and should be removed to keep the CSP tight.Task
https://strategy.data.govfrom theimg-srcdirective inpages/_includes/meta.htmlAcceptance criteria
meta.htmlCSP no longer referencesstrategy.data.govDepends on
Ticket 2