PP-11850 enclose reporting endpoint url in quotes (#3797)

alphagov · Feb 7, 2024 · 5096c9c · 5096c9c
1 parent 8cb4ba2
commit 5096c9c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/middleware/csp.js b/app/middleware/csp.js
@@ -90,7 +90,7 @@ const worldpayIframeCSP = helmet({
 })
 
 const setReportingEndpoints = (req, res, next) => {
-  res.setHeader('Reporting-Endpoints', `${reportingEndpointName}=${frontendUrl}${paths.csp.path}`)
+  res.setHeader('Reporting-Endpoints', `${reportingEndpointName}="${frontendUrl}${paths.csp.path}"`)
   next()
 }