From dc6c2e6bc009802ebd307a455c41c84a897a4ae1 Mon Sep 17 00:00:00 2001 From: clemkeirua Date: Mon, 17 Jun 2019 16:50:20 +0200 Subject: [PATCH] add missing elements --- config/initializers/content_security_policy.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb index 09a4f5669..f105b9eaa 100644 --- a/config/initializers/content_security_policy.rb +++ b/config/initializers/content_security_policy.rb @@ -9,12 +9,12 @@ Rails.application.config.content_security_policy do |policy| policy.img_src :self, "*.openstreetmap.org", "static.demarches-simplifiees.fr", "*.cloud.ovh.net", "stats.data.gouv.fr", "*" # Whitelist JS: nous, sendinblue et matomo # miniprofiler et nous avons quelques boutons inline :( - policy.script_src :self, "*.sibautomation.com", "sibautomation.com", "stats.data.gouv.fr", "*.sendinblue.com", :unsafe_eval, :unsafe_inline + policy.script_src :self, "stats.data.gouv.fr", "*.sendinblue.com", :unsafe_eval, :unsafe_inline # Pour les CSS, on a beaucoup de style inline et quelques balises