cfpb / consumerfinance.gov

Django project protecting American consumers
https://www.consumerfinance.gov/
Creative Commons Zero v1.0 Universal
273 stars 110 forks source link

fix(csp): add exceptions for ANDI A11y Tool #8542

Closed billhimmelsbach closed 1 week ago

billhimmelsbach commented 3 weeks ago

We helped the ITAP team over in RegTech make some exceptions to our CSP during testing so they could use the ANDI accessibility tool for their accessibility audits, and they were hoping they could also run it on cf.gov. This PR adds the few CSP tweaks they need for the tool to start working.

You can see the current CSP issues by following the "How to test this PR" steps or take a peek at the screenshots.

Closes #8541

Notes and todos

Additions

How to test this PR

  1. Install the ANDI accessibility tool bookmarklet in your browser using these instructions
  2. Click the ANDI button when on consumerfinance.gov (currently on DEV2)
  3. Does the tool appear and work as expected?

Screenshots

Before

Screenshot 2024-08-22 at 4 56 16 AM

After

Screenshot 2024-08-22 at 4 56 54 AM