peter/ukaiautomation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix CSP violations and revert to stable CSS version

Browse Source 
- Add region1.google-analytics.com to CSP headers in index.php and blog articles
- Fix manifest.json icon purpose warning by changing to "any"
- Add mobile-web-app-capable meta tag for mobile compatibility
- Revert CSS files to stable version from commit 5558f53 to resolve hero section animation issues
- Remove spam protection code that was causing layout problems

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
root
2025-06-18 05:17:33 +00:00
parent 283ea68ff8
commit cffe81f960
23 changed files with 424 additions and 184 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
index.php
View File

@@ -5,7 +5,7 @@ header('X-Frame-Options: DENY');
header('X-XSS-Protection: 1; mode=block');
header('Strict-Transport-Security: max-age=31536000; includeSubDomains');
header('Referrer-Policy: strict-origin-when-cross-origin');
header('Content-Security-Policy: default-src \'self\'; script-src \'self\' \'unsafe-inline\' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms; style-src \'self\' \'unsafe-inline\' https://fonts.googleapis.com; font-src \'self\' https://fonts.gstatic.com; img-src \'self\' data: https://www.google-analytics.com; connect-src \'self\' https://www.google-analytics.com https://analytics.google.com;');
header('Content-Security-Policy: default-src \'self\'; script-src \'self\' \'unsafe-inline\' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms https://www.google.com https://www.gstatic.com; style-src \'self\' \'unsafe-inline\' https://fonts.googleapis.com; font-src \'self\' https://fonts.gstatic.com; img-src \'self\' data: https://www.google-analytics.com; connect-src \'self\' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.google.com; frame-src https://www.google.com;');
// SEO and performance optimizations
$page_title = "UK Data Services | Professional Web Scraping & Data Analytics Solutions";
@@ -98,10 +98,6 @@ $twitter_card_image = "https://ukdataservices.co.uk/assets/images/ukds-main-logo
<!-- Resource Preloading for Performance -->
<link rel="preload" href="assets/css/main.min.css" as="style">
<!-- Google reCAPTCHA v3 -->
<?php require_once '.recaptcha-config.php'; ?>
<script src="https://www.google.com/recaptcha/api.js?render=<?php echo RECAPTCHA_SITE_KEY; ?>"></script>
<link rel="preload" href="assets/images/ukds-main-logo.webp" as="image">
<link rel="preload" href="assets/js/main.min.js" as="script">
@@ -880,15 +876,6 @@ $twitter_card_image = "https://ukdataservices.co.uk/assets/images/ukds-main-logo
<div class="contact-form">
<form action="contact-handler.php" method="POST" class="form">
<?php
session_start();
if (!isset($_SESSION['csrf_token'])) {
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
?>
<input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($_SESSION['csrf_token']); ?>">
<!-- Honeypot field for spam protection -->
<input type="text" name="website" style="display: none !important; position: absolute !important; left: -9999px !important;" tabindex="-1" autocomplete="off">
<div class="form-group">
<label for="name">Contact Name *</label>
<input type="text" id="name" name="name" required>
@@ -924,7 +911,6 @@ $twitter_card_image = "https://ukdataservices.co.uk/assets/images/ukds-main-logo
</div>
<button type="submit" class="btn btn-primary btn-full">Submit Enquiry</button>
<input type="hidden" name="recaptcha_response" id="recaptchaResponse">
</form>
</div>
</div>
@@ -990,26 +976,6 @@ $twitter_card_image = "https://ukdataservices.co.uk/assets/images/ukds-main-logo
<!-- Scripts -->
<script src="assets/js/main.min.js"></script>
<!-- reCAPTCHA v3 Integration -->
<script>
// Execute reCAPTCHA on form submission
document.addEventListener('DOMContentLoaded', function() {
const contactForm = document.querySelector('form[action="contact-handler.php"]');
if (contactForm) {
contactForm.addEventListener('submit', function(e) {
e.preventDefault();
grecaptcha.ready(function() {
grecaptcha.execute('<?php echo RECAPTCHA_SITE_KEY; ?>', {action: 'contact'}).then(function(token) {
document.getElementById('recaptchaResponse').value = token;
contactForm.submit();
});
});
});
}
});
</script>
<!-- Service Worker Registration -->
<script>
if ('serviceWorker' in navigator) {