fix: httpEquiv content all

SocialGouv · Nov 4, 2022 · 65a45ec · 65a45ec
1 parent 7331082
commit 65a45ec
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/tumeplay-vitrine/pages/index.tsx b/tumeplay-vitrine/pages/index.tsx
@@ -277,7 +277,13 @@ const Home = ({
           <title>Tumeplay</title>
           <meta
             httpEquiv="Content-Security-Policy"
-            content=" default-src https://tumeplay.fabrique.social.gouv.fr https://tumeplay-preprod.dev.fabrique.social.gouv.fr 'self'; connect-src https://backend-tumeplay.fabrique.social.gouv.fr/contents https://backend-tumeplay-preprod.dev.fabrique.social.gouv.fr https://ipapi.co/json/ https://matomo.fabrique.social.gouv.fr/matomo.php; font-src 'self'; img-src 'self' data: https://backend-tumeplay.fabrique.social.gouv.fr https://backend-tumeplay-preprod.dev.fabrique.social.gouv.fr https://backend-tumeplay.fabrique.social.gouv.frundefined https://backend-tumeplay-preprod.dev.fabrique.social.gouv.frundefined; script-src 'self' https://matomo.fabrique.social.gouv.fr/matomo.js; style-src 'self' 'unsafe-inline'"
+            content="default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; 
+						script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; 
+						connect-src * data: blob: 'unsafe-inline'; 
+						img-src * data: blob: 'unsafe-inline'; 
+						frame-src * data: blob: ; 
+						style-src * data: blob: 'unsafe-inline';
+						font-src * data: blob: 'unsafe-inline';"
           />
           <meta
             name="description"