Ajoute frame-src pour les statistiques (#1813)

betagouv · Aug 27, 2023 · 29f7a9a · 29f7a9a
1 parent 71f9850
commit 29f7a9a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/conf/application.conf b/conf/application.conf
@@ -43,7 +43,7 @@ play.filters.csp {
     style-src = "'self' 'unsafe-inline' stats.data.gouv.fr"
     # "img-src data:" needed for MDL (image are loaded by JS)
     img-src = "'self' data: stats.data.gouv.fr"
-    frame-src = "'self' https://www.dailymotion.com"
+    frame-src = "'self' *.aplus.beta.gouv.fr https://www.dailymotion.com"
     font-src = "'self'"
     connect-src = "'self' https://stats.data.gouv.fr"
     frame-ancestors = "'self'"