[SPIKE] Content Security Policy exception

[penny-lischer]

Problem statement

Azure captured the following exception in production which needs some investigation.

EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' https://js.monitor.azure.com https://www.googletagmanager.com https://hhs-prime.okta.com https://reportstream.okta.com https://global.oktacdn.com https://www.google-analytics.com https://*.in.applicationinsights.azure.com https://dap.digitalgov.gov".

at Function (<anonymous>)
at p (<anonymous>:1:102)
at <anonymous>:1:199

What you need to know

I believe we had an issue like this in the past and may be able to look back to see what the fix was.
Captured on Sept, 19, 2024.

Acceptance criteria

• See what is needed to resolve this issue and/or if it something needed from devops.

To do

• ...