fix(nginx): update nginx rules

SocialGouv · Nov 9, 2023 · 9af36f5 · 9af36f5
1 parent 362df4d
commit 9af36f5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.kontinuous/values.yaml b/.kontinuous/values.yaml
@@ -168,7 +168,7 @@ portail-usagers:
   ingress:
     annotations:
       nginx.ingress.kubernetes.io/configuration-snippet: |
-        more_set_headers "Content-Security-Policy: default-src 'none'; manifest-src 'self' https://*.gouv.fr; connect-src 'self' https://*.gouv.fr; font-src 'self'; img-src 'self' data:; script-src 'self' https://*.gouv.fr 'unsafe-inline'; frame-src 'self' https://*.gouv.fr; style-src 'self' 'unsafe-inline'";
+        more_set_headers "Content-Security-Policy: default-src 'none'; manifest-src 'self' https://*.gouv.fr; connect-src 'self' https://*.gouv.fr ; media-src 'self' https://domifaprod2.blob.core.windows.net/ https://tally.so/; font-src 'self'; img-src 'self' https://tally.so/ data:; script-src 'self' 'unsafe-inline' https://*.gouv.fr https://tally.so/ https://tally.so/widgets/embed.js ; frame-src 'self' https://*.gouv.fr  https://tally.so/ ; style-src 'self' 'unsafe-inline'";
         more_set_headers "X-Frame-Options: deny";
         more_set_headers "X-Content-Type-Options: nosniff";
         more_set_headers "Cache-Control: no-store";