diff --git a/packages/code-du-travail-frontend/next.config.mjs b/packages/code-du-travail-frontend/next.config.mjs index 309d9e0010..b0e8f44d81 100644 --- a/packages/code-du-travail-frontend/next.config.mjs +++ b/packages/code-du-travail-frontend/next.config.mjs @@ -2,7 +2,7 @@ import { withSentryConfig } from "@sentry/nextjs"; import MappingReplacement from "./redirects.json" assert { type: "json" }; const ContentSecurityPolicy = ` -img-src 'self' https://travail-emploi.gouv.fr https://www.service-public.fr https://cdtn-prod-public.s3.gra.io.cloud.ovh.net https://matomo.fabrique.social.gouv.fr data:; +img-src 'self' https://travail-emploi.gouv.fr https://www.service-public.fr https://cdtn-prod-public.s3.gra.io.cloud.ovh.net https://matomo.fabrique.social.gouv.fr; script-src 'self' https://mon-entreprise.urssaf.fr https://matomo.fabrique.social.gouv.fr https://tally.so ${ process.env.NEXT_PUBLIC_APP_ENV !== "production" ? "'unsafe-eval'" : "" };