unused csp

SocialGouv · Mar 21, 2024 · a35532a · a35532a
1 parent eca6538
commit a35532a
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/next.config.js b/next.config.js
@@ -23,7 +23,6 @@ const ContentSecurityPolicy =
       img-src 'self' data: authjs.dev;
       script-src 'nonce-${nonce}' 'strict-dynamic';
       connect-src 'self' api.github.com matomo.fabrique.social.gouv.fr ${process.env.NEXT_PUBLIC_HASURA_URL} sentry.fabrique.social.gouv.fr;
-      frame-src: 'self' matomo.fabrique.social.gouv.fr;
     `
     : `
       default-src 'self' matomo.fabrique.social.gouv.fr;