diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb index 6b27a891da..f82177740e 100644 --- a/config/initializers/content_security_policy.rb +++ b/config/initializers/content_security_policy.rb @@ -9,7 +9,7 @@ p.default_src :self p.base_uri :self p.font_src :self, :data, 'https://github.com', 'https://fonts.gstatic.com' - p.img_src :self, :data, 'https://conseillers-entreprises.service-public.fr/', 'https://jedonnemonavis.numerique.gouv.fr', 'stats.data.gouv.fr', 'https://stats.beta.gouv.fr/', 'https://www.google.com', 'https://www.google.fr', 'https://googleads.g.doubleclick.net', 'https://www.googletagmanager.com', 'https://www.googleadservices.com', 'https://www.gstatic.com', 'https://adservice.google.com', '415474841.privacysandbox.googleadservices.com' + p.img_src :self, :data, 'conseillers-entreprises.service-public.fr', 'https://conseillers-entreprises.service-public.fr/', 'https://jedonnemonavis.numerique.gouv.fr', 'stats.data.gouv.fr', 'https://stats.beta.gouv.fr/', 'https://www.google.com', 'https://www.google.fr', 'https://googleads.g.doubleclick.net', 'https://www.googletagmanager.com', 'https://www.googleadservices.com', 'https://www.gstatic.com', 'https://adservice.google.com', '415474841.privacysandbox.googleadservices.com' p.object_src :none p.style_src :self, :unsafe_inline, 'https://fonts.googleapis.com' p.script_src :self, :blob, 'https://browser.sentry-cdn.com', 'sentry.io', 'stats.data.gouv.fr', 'https://stats.beta.gouv.fr/', 'https://cdn.jsdelivr.net/', 'https://www.googletagmanager.com/', 'https://www.googleadservices.com', 'https://googleads.g.doubleclick.net', 'https://www.google.com', 'www.pagespeed-mod.com'