PIMS-2106: Address WAVA Scan Findings

LawrenceLau2020 commented 2 weeks ago

## 🎯 Summary [PIMS-2106](https://citz-imb.atlassian.net/browse/PIMS-2106)

Changes

Added a few more security header policies to the nginx.conf (see Jira ticket for more details).

Testing

To test you will need to build and then run the react-app and the express-api as docker containers docker-compose build pims-app-v2 and docker-compose build pims-api-v2 and then to run the containers: docker-compose up pims-app-v2 -d
Make sure everything works as expected, all images and styles are loading properly.

🔰 Checklist

[x] I have read and agree with the following checklist and am following the guidelines in our Code of Conduct document.

I have performed a self-review of my code.

I have commented my code, particularly in hard-to-understand areas.

I have made corresponding changes to the documentation where required.

I have tested my changes to the best of my ability.

My changes generate no new warnings.

github-actions[bot] commented 2 weeks ago

🚀 Deployment Information

The React APP Image has been built with the tag: 2834. Please make sure to utilize this specific tag when promoting these changes to the TEST and PROD environments during the APP deployment. For more updates please monitor Image Tags Page on Wiki.

dbarkowsky commented 1 week ago

Adding https://server.arcgisonline.com to the img-src seems to have solved the issue.

bcgov / PIMS

PIMS-2106: Address WAVA Scan Findings #2834

Changes

Testing

🔰 Checklist