EPMRPP-99232 || Updated directives [Cherry-Pick]

Author: maria-hambardzumian

.github/workflows/ci.yml

@@ -17,6 +17,7 @@ env:
   DOCUMENTATION_URL: http://rpp-docs.s3-website.eu-central-1.amazonaws.com
   CONTENTFUL_ENV_ID: master
   CONTENTFUL_HOST: cdn.contentful.com
+  CLARITY_PROJECT_ID: nr74d9qrwk
 
 on:
   pull_request:
@@ -50,6 +51,7 @@ jobs:
           echo CONTENTFUL_HOST=${{ env.CONTENTFUL_HOST }} >> .env.production
           echo GTM_ID=${{ env.GTM_ID }} >> .env.production
           echo DOCUMENTATION_URL=${{ env.DOCUMENTATION_URL }} >> .env.production
+          echo CLARITY_PROJECT_ID=${{ env.CLARITY_PROJECT_ID }} >> .env.production  
 
       - name: Run eslint
         run: npm run lint

.github/workflows/deploy-dev.yml

@@ -86,6 +86,7 @@ jobs:
           DOCUMENTATION_URL=//reportportal.io/docs
           GTM_ID=GTM-MK7ZHTL
           GATSBY_MAILCHIMP_LIST_ID=ca6d0eec5b
+          CLARITY_PROJECT_ID=nr74d9qrwk
           CONTENTFUL_ENV_ID=master
           CONTENTFUL_HOST=cdn.contentful.com
           CONTENTFUL_ACCESS_TOKEN=${{ secrets.CONTENTFUL_ACCESS_TOKEN }}
@@ -106,6 +107,7 @@ jobs:
           echo CONTACT_US_URL=$CONTACT_US_URL >> .env.production
           echo DOCUMENTATION_URL=$DOCUMENTATION_URL >> .env.production
           echo GATSBY_MAILCHIMP_LIST_ID=$GATSBY_MAILCHIMP_LIST_ID >> .env.production
+          echo CLARITY_PROJECT_ID=$CLARITY_PROJECT_ID >> .env.production
 
       - name: Build the source code
         run: npm run build

.github/workflows/deploy-prod.yml

@@ -20,6 +20,7 @@ env:
   CONTENTFUL_ENV_ID : master
   CONTENTFUL_HOST : cdn.contentful.com
   GATSBY_MAILCHIMP_LIST_ID: ca6d0eec5b
+  CLARITY_PROJECT_ID: nr74d9qrwk
 
 on:
   push:
@@ -59,6 +60,7 @@ jobs:
           echo CONTACT_US_URL=${{ env.CONTACT_US_URL }} >> .env.production
           echo DOCUMENTATION_URL=${{ env.DOCUMENTATION_URL }} >> .env.production
           echo GATSBY_MAILCHIMP_LIST_ID=${{ env.GATSBY_MAILCHIMP_LIST_ID }} >> .env.production
+          echo CLARITY_PROJECT_ID=${{ env.CLARITY_PROJECT_ID }} >> .env.production
 
       - name: Build the source code
         run: npm run build

gatsby-config.ts

@@ -81,6 +81,37 @@ const config: GatsbyConfig = {
         },
       },
     },
+    {
+      resolve: 'gatsby-plugin-csp',
+      options: {
+        disableOnDev: false,
+        reportOnly: false,
+        mergeStyleHashes: false,
+        mergeScriptHashes: false,
+        directives: {
+          'script-src':
+            "'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com https://www.googletagmanager.com https://www.clarity.ms https://www.bing.com https://www.google.com *.visualwebsiteoptimizer.com app.vwo.com",
+          'script-src-elem':
+            "'self' data: 'unsafe-inline' *.googleapis.com *.visualwebsiteoptimizer.com https://*.clarity.ms",
+          'style-src': "'self' 'unsafe-inline'",
+          'connect-src':
+            "'self' https://status.reportportal.io https://www.google-analytics.com https://*.clarity.ms https://www.googletagmanager.com *.visualwebsiteoptimizer.com app.vwo.com https://*.salesforce-sites.com",
+          'img-src':
+            "'self' https://www.google-analytics.com https://*.clarity.ms https://www.google.com *.visualwebsiteoptimizer.com app.vwo.com  data: blob: http: https:",
+          'worker-src': "'self' blob:",
+          'frame-src':
+            "'self' https://www.youtube-nocookie.com  *.visualwebsiteoptimizer.com app.vwo.com https://www.googletagmanager.com https://www.google.com",
+          'object-src': "'none'",
+        },
+      },
+    },
+    {
+      resolve: 'gatsby-plugin-clarity',
+      options: {
+        clarity_project_id: process.env.CLARITY_PROJECT_ID,
+        enable_on_dev_env: true,
+      },
+    },
   ],
   trailingSlash: 'never',
 };