fix: iframe security blob (#5227)

* feat: prendre referer au lieu de src_url * Revert "feat: prendre referer au lieu de src_url" This reverts commit 5516d3c. * fix: iframe csp pour telechargement modele --------- Co-authored-by: Victor Zeinstra <[email protected]>
SocialGouv · Jun 21, 2023 · b6c1bd1 · b6c1bd1
1 parent c59c699
commit b6c1bd1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/code-du-travail-frontend/next.config.js b/packages/code-du-travail-frontend/next.config.js
@@ -8,7 +8,7 @@ img-src 'self' data: *.fabrique.social.gouv.fr https://travail-emploi.gouv.fr ht
 script-src 'self' https://mon-entreprise.urssaf.fr *.fabrique.social.gouv.fr https://cdnjs.cloudflare.com ${
   process.env.NODE_ENV !== "production" && "'unsafe-eval'"
 };
-frame-src 'self' https://mon-entreprise.urssaf.fr https://matomo.fabrique.social.gouv.fr *.dailymotion.com;
+frame-src 'self' https://mon-entreprise.urssaf.fr https://matomo.fabrique.social.gouv.fr *.dailymotion.com https://cdtnadminprod.blob.core.windows.net;
 style-src 'self' 'unsafe-inline';
 font-src 'self' data: blob:;
 worker-src 'self' blob:;