[Release] Content Security Policy changes

[daine]

Summary | Résumé

Changes to the content security policy

• Adds unsafe inline https for style-src
• Adds google-analytics.com for script-src and frame-src

⚠️ This PR can be tested through the following URL(s):

Main - https://staging.learning-resources.cdssandbox.xyz/ EN - https://en.staging.learning-resources.cdssandbox.xyz/ FR - https://fr.staging.learning-resources.cdssandbox.xyz/fr/

🚀 Release Checklist

Item	Checked / Reviewed by	Status	Notes
Metrics - Google Analytics working and collecting data	@daine @hillaryl	☀️ Ready
Content - Contentful		Unchanged
Content - English	@anikbrazeau	Unchanged
Content - French	@anikbrazeau	Unchanged
Infra - Domains OK	@daine	Unchanged
Infra - Amplify OK	@daine	Unchanged
Monitoring (Uptime Robot)	@daine	Unchanged	Status page dashboard
Accessibility - aXe DevTools	@daine @dylanzheng94	Unchanged
Accessibility - Lighthouse checks	@daine @dylanzheng94	Unchanged
Accessibility - WCAG 2.0 AA	@emanelfy	Unchanged	The intention is to achieve AAA for full launch
Infra - Content Security Policy	@daine	☀️ Ready

After merge, do this:

From your terminal, make sure you are in the main branch, then type

git tag -a v0.2.0 -m <release notes>
git push --tags

This bumps up the release version

[aws-amplify-ca-central-1[bot]]

⚠️ This PR can be tested through the following URL(s): Main - https://staging.learning-resources.cdssandbox.xyz/ EN - https://en.staging.learning-resources.cdssandbox.xyz/ FR - https://fr.staging.learning-resources.cdssandbox.xyz/fr/

[github-actions[bot]]

TF Plan for app

✅   Terraform Format: success ✅   Terraform Plan: success ✅   Conftest: success

Plan: 0 to add, 1 to change, 0 to destroy

Show plan

```terraform Resource actions are indicated with the following symbols: ~ update in-place Terraform will perform the following actions: # aws_amplify_app.learning_resources_staging will be updated in-place ~ resource "aws_amplify_app" "learning_resources_staging" { ~ environment_variables = { + "GOOGLE_ANALYTICS_ID" = "" # (5 unchanged elements hidden) } id = "d3eik05156ec7t" name = "Learning Resources (Staging)" tags = {} # (16 unchanged attributes hidden) # (2 unchanged blocks hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: plan.tfplan To perform exactly these actions, run the following command to apply: terraform apply "plan.tfplan" ```

Show Conftest results

```sh WARN - plan.json - main - Missing Common Tags: ["aws_acm_certificate.app"] WARN - plan.json - main - Missing Common Tags: ["aws_acm_certificate.main"] WARN - plan.json - main - Missing Common Tags: ["aws_amplify_app.learning_resources"] WARN - plan.json - main - Missing Common Tags: ["aws_amplify_app.learning_resources_nuxt3"] WARN - plan.json - main - Missing Common Tags: ["aws_amplify_app.learning_resources_staging"] WARN - plan.json - main - Missing Common Tags: ["aws_amplify_app.learning_resources_storybook"] WARN - plan.json - main - Missing Common Tags: ["aws_amplify_branch.main"] WARN - plan.json - main - Missing Common Tags: ["aws_amplify_branch.main_storybook"] WARN - plan.json - main - Missing Common Tags: ["aws_amplify_branch.nuxt3"] WARN - plan.json - main - Missing Common Tags: ["aws_amplify_branch.staging"] WARN - plan.json - main - Missing Common Tags: ["aws_ecr_repository.learning_resources"] WARN - plan.json - main - Missing Common Tags: ["aws_iam_role.app"] 29 tests, 17 passed, 12 warnings, 0 failures, 0 exceptions ```