From 5096c9ce9a40805f563ec169ab07cfac602c6f04 Mon Sep 17 00:00:00 2001 From: Nathaniel Steers Date: Wed, 7 Feb 2024 11:45:47 +0000 Subject: [PATCH] PP-11850 enclose reporting endpoint url in quotes (#3797) --- app/middleware/csp.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/middleware/csp.js b/app/middleware/csp.js index efd96b6a8..52d608936 100644 --- a/app/middleware/csp.js +++ b/app/middleware/csp.js @@ -90,7 +90,7 @@ const worldpayIframeCSP = helmet({ }) const setReportingEndpoints = (req, res, next) => { - res.setHeader('Reporting-Endpoints', `${reportingEndpointName}=${frontendUrl}${paths.csp.path}`) + res.setHeader('Reporting-Endpoints', `${reportingEndpointName}="${frontendUrl}${paths.csp.path}"`) next() }