csp

SocialGouv · Mar 21, 2024 · 5d66aa5 · 5d66aa5
1 parent 9fdf4f9
commit 5d66aa5
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/next.config.js b/next.config.js
@@ -21,7 +21,7 @@ const ContentSecurityPolicy =
       base-uri 'none';
       style-src 'self' 'unsafe-inline';
       img-src 'self' data: authjs.dev;
-      script-src 'nonce-${nonce}' 'strict-dynamic';
+      script-src self *.fabrique.social.gouv.fr;
       connect-src 'self' api.github.com matomo.fabrique.social.gouv.fr ${process.env.NEXT_PUBLIC_HASURA_URL} sentry.fabrique.social.gouv.fr;
     `
     : `

diff --git a/src/pages/_document.tsx b/src/pages/_document.tsx
@@ -3,7 +3,7 @@ import { Html, Head, Main, NextScript } from "next/document"
 export default function Document() {
   return (
     <Html lang="fr">
-      <Head nonce={process.env.NONCE}>
+      <Head>
         <meta
           name="description"
           content="Site de gestion des comptes de services des utilisateurs de la Fabrique Numérique des Ministères Sociaux."