Merge pull request #332 from mission-apprentissage/infra/add-cors

[Infra] Ajoute *.incubateur.net in CSP
mission-apprentissage · Oct 17, 2024 · 6df0949 · 6df0949
2 parents a5856aa + 756bdc3
commit 6df0949
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/reverse_proxy/app/nginx/nginx.conf b/reverse_proxy/app/nginx/nginx.conf
@@ -24,7 +24,7 @@ http {
     add_header Strict-Transport-Security "max-age=31536000; includeSubdomains" always;
     add_header X-Content-Type-Options "nosniff" always;
     add_header Referrer-Policy "no-referrer-when-downgrade";
-    add_header Content-Security-Policy "frame-ancestors 'self' *.onisep.fr *.beta.gouv.fr";
+    add_header Content-Security-Policy "frame-ancestors 'self' *.onisep.fr *.beta.gouv.fr *.incubateur.net";
 
     gzip on;
     gzip_vary on;