fix: corrige les CSP (000)

betagouv · Nov 25, 2024 · 2747686 · 2747686
1 parent 98aed2c
commit 2747686
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/app/front/index.html b/app/front/index.html
@@ -30,10 +30,11 @@
       script-src 'self';
       style-src 'self' 'unsafe-inline';
       img-src 'self' data:;
-      connect-src 'self' %VITE_API_URL% %VITE_KEYCLOAK_URL% https://api-adresse.data.gouv.fr;
-      frame-src 'self' %VITE_KEYCLOAK_URL%;
+      connect-src 'self' %VITE_API_URL% %VITE_KEYCLOAK_URL% https://api-adresse.data.gouv.fr *.ingest.de.sentry.io;
+      frame-src 'self' %VITE_APP_URL% %VITE_KEYCLOAK_URL%;
       font-src 'self';
-      object-src 'self';
+      object-src 'self'
+      worker-src blob: %VITE_APP_URL%;
   ">
   <meta http-equiv="X-XSS-Protection" content="1; mode=block">
   <meta http-equiv="X-Content-Type-Options" content="nosniff">

diff --git a/app/front/package.json b/app/front/package.json
@@ -25,6 +25,7 @@
     "@hookform/resolvers": "^3.9.1",
     "@radix-ui/react-accordion": "^1.2.1",
     "@radix-ui/react-toast": "^1.2.2",
+    "@radix-ui/react-toggle": "",
     "@sentry/react": "^8.38.0",
     "@sentry/vite-plugin": "^2.22.6",
     "@t3-oss/env-core": "^0.11.1",