bug/csp-cloudfront-fixes

[omartehsin1]

Summary | Résumé

Updated cookies to forward CSRF token

[github-actions[bot]]

Production: cloudfront

✅   Terraform Format: success ✅   Terraform Plan: success ✅   Conftest: success

Plan: 0 to add, 2 to change, 0 to destroy

Show plan

```terraform Resource actions are indicated with the following symbols: ~ update in-place Terraform will perform the following actions: # aws_cloudfront_distribution.simplify_privacy_app_cf_distribution will be updated in-place ~ resource "aws_cloudfront_distribution" "simplify_privacy_app_cf_distribution" { id = "E2KDGWZI9S6D8X" tags = { "CostCentre" = "simplify-privacy-statements-production" "Terraform" = "true" } # (19 unchanged attributes hidden) ~ default_cache_behavior { # (12 unchanged attributes hidden) ~ forwarded_values { # (3 unchanged attributes hidden) ~ cookies { ~ forward = "none" -> "whitelist" ~ whitelisted_names = [ + "_csrf", ] } } } # (4 unchanged blocks hidden) } # aws_cloudfront_response_headers_policy.simplify_privacy_app_headers_policy will be updated in-place ~ resource "aws_cloudfront_response_headers_policy" "simplify_privacy_app_headers_policy" { id = "15cb4030-2708-406b-a7ba-92df299a954d" name = "simplify-privacy-app-headers" # (1 unchanged attribute hidden) ~ security_headers_config { ~ content_security_policy { ~ content_security_policy = "script-src 'self' 'unsafe-inline' cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://simplify-privacy-statements.alpha.canada.ca/; default-src 'self'; base-uri 'none'; font-src 'self' https://fonts.gstatic.com/; img-src 'self' data: https://www.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline';" -> "script-src 'self' 'unsafe-inline' cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://simplify-privacy-statements.alpha.canada.ca/dist/js/; default-src 'self'; base-uri 'none'; font-src 'self' https://fonts.gstatic.com/; img-src 'self' data: https://www.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline';" # (1 unchanged attribute hidden) } # (5 unchanged blocks hidden) } } Plan: 0 to add, 2 to change, 0 to destroy. Warning: Argument is deprecated with module.log_bucket.aws_s3_bucket.this, on .terraform/modules/log_bucket/S3_log_bucket/main.tf line 8, in resource "aws_s3_bucket" "this": 8: resource "aws_s3_bucket" "this" { Use the aws_s3_bucket_server_side_encryption_configuration resource instead (and 3 more similar warnings elsewhere) ───────────────────────────────────────────────────────────────────────────── Saved the plan to: plan.tfplan To perform exactly these actions, run the following command to apply: terraform apply "plan.tfplan" ```

Show Conftest results

```sh 18 tests, 18 passed, 0 warnings, 0 failures, 0 exceptions ```