add sha

numerique-gouv · Sep 25, 2024 · 93bb50e · 93bb50e
1 parent 46d4238
commit 93bb50e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/index.ts b/src/index.ts
@@ -99,7 +99,7 @@ if (!DISABLE_SECURITY_RESPONSE_HEADERS) {
           "settings.crisp.chat",
           "client.crisp.chat",
           "blob:",
-          "cdn.crisp.chat"
+          "cdn.crisp.chat",
         ],
         styleSrc: ["'self'", "client.crisp.chat", "'unsafe-inline'"],
         fontSrc: ["'self'", "data:", "client.crisp.chat"],
@@ -111,6 +111,7 @@ if (!DISABLE_SECURITY_RESPONSE_HEADERS) {
           "client.crisp.chat",
           "stats.data.gouv.fr",
           "'sha256-RtdC0WqE+hX0MgZZk4QgMbkV1woYKbsuKQKKnWxsudI='",
+          "'sha256-9mBXYlkOC54Ex+ybfMS80Rl1umuwdSZuGjRL5zmgouU='",
         ],
         workerSrc: ["'self'", "blob:"],
         // As for https://github.com/w3c/webappsec-csp/issues/8, the feature is debated