Merge pull request 'ozg-6892 use style-scr inline-unsafe and activate CSP'...

Merge pull request 'ozg-6892 use style-scr inline-unsafe and activate CSP' (#50) from ozg-6892 into master

Jenkinsfile

@@ -43,7 +43,7 @@ pipeline {
 
 						sh 'npm cache verify'
                         sh 'npm install'
-                        sh 'npm run build'
+                        sh 'NODE_ENV=production npm run build'
                         //sh 'npm run test'
                                                            
 	                    if (isMasterBranch()) {

client/docker/nginx.conf

@@ -7,6 +7,7 @@ http {
     add_header Strict-Transport-Security "max-age=31536000" always;
     add_header X-Frame-Options "SAMEORIGIN" always;
     add_header X-Content-Type-Options "nosniff" always;
+    add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'none'; child-src 'self'; frame-ancestors 'none'; base-uri 'none'; upgrade-insecure-requests; require-trusted-types-for 'script'" always;
     add_header X-XSS-Protection "0" always;
     add_header Referrer-Policy "no-referrer" always;
 

client/package-lock.json

 {
     "name": "ozg-frontend-client",
-    "version": "0.3.1",
+    "version": "1.4.0-SNAPSHOT",
     "lockfileVersion": 2,
     "requires": true,
     "packages": {
         "": {
             "name": "ozg-frontend-client",
-            "version": "0.3.1",
+            "version": "1.4.0-SNAPSHOT",
             "dependencies": {
                 "axios": "^1.5.1",
                 "react": "^18.2.0",

client/webpack.config.js

@@ -47,7 +47,7 @@ module.exports = {
     publicPath: "/"
   },
   mode: prod ? "production" : "development",
-  devtool: prod ? undefined : "eval-source-map",
+  devtool: prod ? "source-map" : "eval-source-map",
   module: {
     rules: [
       {