fix: Content-Security-Policy - default-src 'self'

SocialGouv · Mar 20, 2024 · 64b59e6 · 64b59e6
1 parent 15a7db5
commit 64b59e6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.kontinuous/values.yaml b/.kontinuous/values.yaml
@@ -13,7 +13,7 @@ app:
     # https://docs.unity3d.com/Manual/webgl-deploying.html
     annotations:
       nginx.ingress.kubernetes.io/configuration-snippet: |
-        more_set_headers "Content-Security-Policy: default-src 'none'; connect-src 'self' https://*.gouv.fr; font-src 'self' data:; img-src 'self'; script-src 'self' https://*.gouv.fr 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https://*.gouv.fr; style-src 'self' 'unsafe-inline'";
+        more_set_headers "Content-Security-Policy: default-src 'self'; connect-src 'self' https://*.gouv.fr; font-src 'self' data:; img-src 'self'; script-src 'self' https://*.gouv.fr 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https://*.gouv.fr; style-src 'self' 'unsafe-inline'";
         more_set_headers "X-Frame-Options: sameorigin";
         more_set_headers "X-XSS-Protection: 1; mode=block";
         more_set_headers "X-Content-Type-Options: none";