From c5715a1e5aabe0f0b398abebab3c02cbcbd46996 Mon Sep 17 00:00:00 2001
From: Remko <remko@conduction.nl>
Date: Mon, 8 Apr 2024 16:58:58 +0200
Subject: [PATCH] Updated CSP meta tag

---
 pwa/package-lock.json       |  8 ++++----
 pwa/package.json            |  2 +-
 pwa/src/layout/Head.tsx     | 10 ++++++----
 pwa/static/.env.development |  2 +-
 4 files changed, 12 insertions(+), 10 deletions(-)

diff --git a/pwa/package-lock.json b/pwa/package-lock.json
index 014bc019..d3172b8e 100644
--- a/pwa/package-lock.json
+++ b/pwa/package-lock.json
@@ -9,7 +9,7 @@
       "version": "1.0.0",
       "dependencies": {
         "@conduction/components": "2.2.49",
-        "@conduction/theme": "1.1.29",
+        "@conduction/theme": "1.1.30",
         "@fortawesome/fontawesome-svg-core": "^6.5.2",
         "@fortawesome/free-brands-svg-icons": "6.5.2",
         "@fortawesome/free-regular-svg-icons": "6.5.2",
@@ -2274,9 +2274,9 @@
       }
     },
     "node_modules/@conduction/theme": {
-      "version": "1.1.29",
-      "resolved": "https://registry.npmjs.org/@conduction/theme/-/theme-1.1.29.tgz",
-      "integrity": "sha512-lvta2mIcLG1wcKbxd9nxwZH+qbZv7y7tbDChMznZRfo5CuZmM21+qeWA3vIosaIid4MXXoNj42HLkZJxhiUpxA==",
+      "version": "1.1.30",
+      "resolved": "https://registry.npmjs.org/@conduction/theme/-/theme-1.1.30.tgz",
+      "integrity": "sha512-/anWb8l+/oMo7mkhXsU/y8Cx+lEJuhdNimjdE9y8DML8Mwycg5WQ8bNk/oS37Im4hxvWe5/HQUVi7blZU23BSg==",
       "hasInstallScript": true,
       "dependencies": {
         "@nl-design-system-unstable/rotterdam-design-tokens": "^1.0.0-alpha.100",
diff --git a/pwa/package.json b/pwa/package.json
index 3fa7da4a..e5844b6d 100644
--- a/pwa/package.json
+++ b/pwa/package.json
@@ -26,7 +26,7 @@
   },
   "dependencies": {
     "@conduction/components": "2.2.49",
-    "@conduction/theme": "1.1.29",
+    "@conduction/theme": "1.1.30",
     "@fortawesome/fontawesome-svg-core": "^6.5.2",
     "@fortawesome/free-brands-svg-icons": "6.5.2",
     "@fortawesome/free-regular-svg-icons": "6.5.2",
diff --git a/pwa/src/layout/Head.tsx b/pwa/src/layout/Head.tsx
index e49c89c7..1d052adb 100644
--- a/pwa/src/layout/Head.tsx
+++ b/pwa/src/layout/Head.tsx
@@ -26,19 +26,21 @@ export const Head: React.FC = () => {
         lang: currentLanguage,
       }}
       bodyAttributes={{
-        class: window.sessionStorage.getItem("NL_DESIGN_THEME_CLASSNAME"),
+        class: "zutphen-theme",
       }}
     >
       <meta
         httpEquiv="Content-Security-Policy"
-        content={` 
+        content={`
         default-src 'self';
         base-uri 'self';
         frame-src 'self';
-        frame-ancestors 'self';
-        img-src 'self' https://www.conduction.nl https://conduction.nl https://raw.githubusercontent.com/ConductionNL/woo-website-*;
+        img-src 'self' data: https://www.conduction.nl https://conduction.nl https://raw.githubusercontent.com/ConductionNL/ https://raw.githubusercontent.com/OpenCatalogi/ ;
         form-action 'self';
         connect-src 'self' https://api.gateway.commonground.nu https://raw.githubusercontent.com/ConductionNL/;
+        style-src 'self' 'unsafe-inline';
+        font-src * data:;
+        ${location.hostname === "localhost" && "script-src 'self' 'unsafe-eval';"}
         `}
       ></meta>
       <title>{`Woo | ${window.sessionStorage.getItem("ORGANISATION_NAME")} | ${
diff --git a/pwa/static/.env.development b/pwa/static/.env.development
index 36cf5876..1d534c27 100644
--- a/pwa/static/.env.development
+++ b/pwa/static/.env.development
@@ -20,7 +20,7 @@ GATSBY_FAVICON_URL="data:image/svg+xml,%3Csvg id='Laag_1' data-name='Laag 1' xml
 
 # Jumbotron
 GATSBY_ORGANISATION_NAME=Conduction
-GATSBY_JUMBOTRON_IMAGE_URL="data:image/svg+xml,%3Csvg id='Laag_1' data-name='Laag 1' xmlns='http://www.w3.org/2000/svg' viewBox='0 0 259.81 300'%3E%3Cpath d='M129.9,0,0,75V225l129.9,75,129.91-75V75Zm96.8,205.89-96.8,55.88L33.1,205.89V94.11l96.8-55.89,96.8,55.89Z' style='fill:%234376fc'/%3E%3Cpolygon points='129.59 112.23 160.01 129.79 195.41 109.35 129.59 71.35 61.47 110.67 61.47 189.33 129.59 228.65 195.41 190.65 160.01 170.21 129.59 187.77 96.88 168.88 96.88 131.12 129.59 112.23' style='fill:%234376fc'/%3E%3C/svg%3E"
+GATSBY_JUMBOTRON_IMAGE_URL=https://www.conduction.nl/wp-content/uploads/2021/07/cropped-Conduction_HOME_0000_afb1-1.png
 
 # Footer
 GATSBY_FOOTER_LOGO_HREF=https://conduction.nl/