fix: corrige les CSP (000)

betagouv · Nov 25, 2024 · af1504e · af1504e
1 parent 98aed2c
commit af1504e
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/app/front/index.html b/app/front/index.html
@@ -30,10 +30,11 @@
       script-src 'self';
       style-src 'self' 'unsafe-inline';
       img-src 'self' data:;
-      connect-src 'self' %VITE_API_URL% %VITE_KEYCLOAK_URL% https://api-adresse.data.gouv.fr;
-      frame-src 'self' %VITE_KEYCLOAK_URL%;
+      connect-src 'self' %VITE_API_URL% %VITE_KEYCLOAK_URL% https://api-adresse.data.gouv.fr *.ingest.de.sentry.io;
+      frame-src 'self' %VITE_APP_URL% %VITE_KEYCLOAK_URL%;
       font-src 'self';
-      object-src 'self';
+      object-src 'self'
+      worker-src blob: %VITE_APP_URL%;
   ">
   <meta http-equiv="X-XSS-Protection" content="1; mode=block">
   <meta http-equiv="X-Content-Type-Options" content="nosniff">

diff --git a/app/front/package.json b/app/front/package.json
@@ -79,4 +79,4 @@
     "vitest": "^2.1.4",
     "vitest-mock-extended": "^2.0.2"
   }
-}
+}
-Original file line number
+Diff line change
@@ Expand Up / @@ -79,4 +79,4 @@ @@
         "vitest": "^2.1.4",
         "vitest-mock-extended": "^2.0.2"
       }
-    }
+    }