netlify.toml

[build.processing]
  skip_processing = false
[build.processing.css]
  bundle = true
  minify = true
[build.processing.js]
  bundle = true
  minify = true
[build.processing.html]
  pretty_urls = true
[build.processing.images]
  compress = true
[[headers]]
  # Changes to this section should be copied to overrides/customHttp.yml in the amplify branch. 
  for = "/*"
  [headers.values]
    X-XSS-Protection = "1; mode=block"
    Referrer-Policy = "no-referrer"
    X-Content-Type-Options = "nosniff"
    X-Frame-Options = "deny"
    Content-Security-Policy = """
      default-src 
        'self'
        ; 
      script-src 
        'self' 
        'sha256-7tJzJRhCSII909o84m4q85UWUc5EDMrrjsQXbeH+qlc='
        blob: 
        https://assets.dcube.cloud 
        https://*.wogaa.sg 
        https://assets.adobedtm.com 
        https://www.google-analytics.com 
        https://cdnjs.cloudflare.com 
        https://va.ecitizen.gov.sg 
        https://*.cloudfront.net 
        https://printjs-4de6.kxcdn.com 
        https://unpkg.com 
        https://wogadobeanalytics.sc.omtrdc.net 
        https://connect.facebook.net 
        https://graph.facebook.com 
        https://facebook.com 
        https://www.facebook.com 
        https://*.googletagmanager.com 
        https://*.licdn.com 
        https://webchat.vica.gov.sg 
        https://vica.gov.sg
        https://www.google.com/recaptcha/
        https://www.gstatic.com/recaptcha/
        https://static.zdassets.com
        https://ekr.zdassets.com
        https://*.zendesk.com
        https://*.zopim.com
        https://www.instagram.com
        https://script.wiz.gov.sg/widget.js
        https://script-staging.wiz.gov.sg/widget.js
        wss://*.zendesk.com
        wss://*.zopim.com
        ; 
      object-src 
        'self'
        ; 
      style-src 
        'self' 
        'unsafe-inline'
        https://fonts.googleapis.com/ 
        https://*.cloudfront.net 
        https://va.ecitizen.gov.sg 
        https://*.wogaa.sg 
        https://cdnjs.cloudflare.com 
        https://datagovsg.github.io 
        https://webchat.vica.gov.sg 
        https://vica.gov.sg
        https://unpkg.com
        https://script.wiz.gov.sg/widget.css
        https://script-staging.wiz.gov.sg/widget.css
        ; 
      img-src 
        *
        ; 
      media-src 
        *
        ; 
      frame-src 
        https://form.gov.sg/ 
        https://wogaa.demdex.net/ 
        https://*.youtube.com 
        https://*.youtube-nocookie.com 
        https://*.vimeo.com 
        https://www.google.com 
        https://checkfirst.gov.sg 
        https://www.checkfirst.gov.sg 
        https://docs.google.com 
        https://nlb.ap.panopto.com
        https://www.google.com/recaptcha/
        https://accounts.google.com
        https://www.gstatic.com/recaptcha/
        https://data.gov.sg
        https://calendar.google.com
        https://datastudio.google.com
        https://lookerstudio.google.com
        https://*.fls.doubleclick.net
        https://www.facebook.com
        https://m.facebook.com/
        https://www.instagram.com
        https://api.id.gov.sg/
        ; 
      frame-ancestors 
        'none'
        ; 
      font-src 
        * 
        data:
        ; 
      connect-src 
        'self' 
        https://dpm.demdex.net 
        https://*.google-analytics.com
        https://analytics.google.com
        https://*.googletagmanager.com 
        https://stats.g.doubleclick.net 
        https://*.wogaa.sg 
        https://va.ecitizen.gov.sg 
        https://ifaqs.flexanswer.com 
        https://*.cloudfront.net 
        https://fonts.googleapis.com 
        https://cdnjs.cloudflare.com 
        https://wogadobeanalytics.sc.omtrdc.net 
        https://data.gov.sg 
        https://api.isomer.gov.sg
        https://webchat.vica.gov.sg
        https://chat.vica.gov.sg
        https://vica.gov.sg
        https://s3-va-prd-vica.s3-ap-southeast-1.amazonaws.com
        wss://chat.vica.gov.sg
        https://api-vica-ana.vica.gov.sg/api/v1/response-ratings
        https://bucket-vica.vica.gov.sg
        https://autocomplete.vica.gov.sg
        https://static.zdassets.com
        https://ekr.zdassets.com
        https://*.zendesk.com
        https://*.zopim.com
        https://ask.gov.sg
        https://staging.ask.gov.sg
        wss://*.zendesk.com
        wss://*.zopim.com
        ;
      """