Bruk bun docker bilde og oppdater CSP

.nais/dev.yaml

@@ -71,15 +71,6 @@ spec:
       value: "modiapersonoversikt"
     - name: APP_VERSION
       value: "{{ version }}"
-    - name: CSP_DIRECTIVES
-      value: "default-src 'self';\
-      script-src 'self' 'unsafe-inline' https://cdn.nav.no;\
-      style-src 'self' 'unsafe-inline' https://cdn.nav.no;\
-      img-src 'self' data:;\
-      font-src 'self' data: https://cdn.nav.no;\
-      connect-src 'self' amplitude.nav.no wss://veilederflatehendelser.intern.dev.nav.no https://telemetry.ekstern.dev.nav.no;\
-      object-src blob:;\
-      frame-src blob:;"
     - name: REFERRER_POLICY
       value: "no-referrer"
     - name: APP_ENVIRONMENT_NAME

Dockerfile.gcp

@@ -1,4 +1,4 @@
-FROM europe-north1-docker.pkg.dev/nais-management-233d/personoversikt/modia-frontend:0.10-node
+FROM europe-north1-docker.pkg.dev/nais-management-233d/personoversikt/modia-frontend:0.11
 ADD proxy-config-q2.json proxy-config.json
 COPY build ./static
 

proxy-config-q2.json

@@ -20,5 +20,20 @@
             "url": "https://modiapersonoversikt-api-q1.dev-fss-pub.nais.io/modiapersonoversikt-api/rest",
             "scope": "api://dev-fss.personoversikt.modiapersonoversikt-api-q1/.default"
         }
+    },
+    "contentSecurityPolicy": {
+        "scriptSrc": ["'self'", "'unsafe-inline'", "https://cdn.nav.no"],
+        "style-src": ["'self'", "'unsafe-inline'", "https://cdn.nav.no"],
+        "img-src": ["'self'", "data:"],
+        "font-src": ["'self'", "data:", "https://cdn.nav.no"],
+        "connect-src": [
+            "'self'",
+            "amplitude.nav.no",
+            "wss://veilederflatehendelser.intern.dev.nav.no",
+            "wss://modiapersonoversikt-draft.intern.dev.nav.no",
+            "https://telemetry.ekstern.dev.nav.no"
+        ],
+        "object-src": [" blob:"],
+        "frame-src": ["blob:"]
     }
 }