From 756bdc3708be66a6250d83b7acc082b0a016dcdb Mon Sep 17 00:00:00 2001 From: Yohann Gablowski Date: Thu, 17 Oct 2024 09:07:56 +0200 Subject: [PATCH] feat(infra): add incubateur.net in CSP --- reverse_proxy/app/nginx/nginx.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/reverse_proxy/app/nginx/nginx.conf b/reverse_proxy/app/nginx/nginx.conf index efe871c1..cae93666 100644 --- a/reverse_proxy/app/nginx/nginx.conf +++ b/reverse_proxy/app/nginx/nginx.conf @@ -24,7 +24,7 @@ http { add_header Strict-Transport-Security "max-age=31536000; includeSubdomains" always; add_header X-Content-Type-Options "nosniff" always; add_header Referrer-Policy "no-referrer-when-downgrade"; - add_header Content-Security-Policy "frame-ancestors 'self' *.onisep.fr *.beta.gouv.fr"; + add_header Content-Security-Policy "frame-ancestors 'self' *.onisep.fr *.beta.gouv.fr *.incubateur.net"; gzip on; gzip_vary on;