fix(csp config): retrait de la règle "data:" (#6218)

SocialGouv · Oct 17, 2024 · 1912756 · 1912756
1 parent 5871a59
commit 1912756
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/code-du-travail-frontend/next.config.mjs b/packages/code-du-travail-frontend/next.config.mjs
@@ -2,7 +2,7 @@ import { withSentryConfig } from "@sentry/nextjs";
 import MappingReplacement from "./redirects.json" assert { type: "json" };
 
 const ContentSecurityPolicy = `
-img-src 'self' https://travail-emploi.gouv.fr https://www.service-public.fr https://cdtn-prod-public.s3.gra.io.cloud.ovh.net https://matomo.fabrique.social.gouv.fr data:;
+img-src 'self' https://travail-emploi.gouv.fr https://www.service-public.fr https://cdtn-prod-public.s3.gra.io.cloud.ovh.net https://matomo.fabrique.social.gouv.fr;
 script-src 'self' https://mon-entreprise.urssaf.fr https://matomo.fabrique.social.gouv.fr https://tally.so ${
   process.env.NEXT_PUBLIC_APP_ENV !== "production" ? "'unsafe-eval'" : ""
 };