diff --git a/packages/site/app/layout.tsx b/packages/site/app/layout.tsx index 93f9ae57aa..a6f0e3e5b2 100644 --- a/packages/site/app/layout.tsx +++ b/packages/site/app/layout.tsx @@ -112,16 +112,13 @@ export default function RootLayout({ children }: { children: JSX.Element }) { _linkedin_partner_id = "1701996"; window._linkedin_data_partner_ids = window._linkedin_data_partner_ids || []; window._linkedin_data_partner_ids.push(_linkedin_partner_id); - diff --git a/packages/site/middleware.ts b/packages/site/middleware.ts index c8966457a6..7de14d984a 100644 --- a/packages/site/middleware.ts +++ b/packages/site/middleware.ts @@ -25,12 +25,27 @@ export function middleware(request: NextRequest) { // options de la politique de sécurité const cspHeader = ` default-src 'self'; - script-src ${scriptSrc} *.axept.io *.posthog.com client.crisp.chat *.googletagmanager.com *.adform.net; + script-src ${scriptSrc} + *.axept.io + *.posthog.com + client.crisp.chat + *.googletagmanager.com + *.adform.net + https://snap.licdn.com; style-src ${styleSrc} client.crisp.chat; - img-src 'self' blob: data: ytimg.com px.ads.linkedin.com server.adform.net https://axeptio.imgix.net https://favicons.axept.io https://image.crisp.chat https://client.crisp.chat ${process.env.NEXT_PUBLIC_STRAPI_URL?.replace( - 'strapiapp', - 'media.strapiapp' - )}; + img-src 'self' blob: data: + ytimg.com + px.ads.linkedin.com + server.adform.net + https://axeptio.imgix.net + https://favicons.axept.io + https://image.crisp.chat + https://client.crisp.chat + https://px4.ads.linkedin.com + ${process.env.NEXT_PUBLIC_STRAPI_URL?.replace( + 'strapiapp', + 'media.strapiapp' + )}; font-src 'self' client.crisp.chat; object-src 'none'; connect-src 'self' @@ -41,7 +56,8 @@ export function middleware(request: NextRequest) { *.axept.io client.crisp.chat wss://client.relay.crisp.chat - wss://stream.relay.crisp.chat; + wss://stream.relay.crisp.chat + https://px.ads.linkedin.com; base-uri 'self'; form-action 'self'; frame-ancestors 'none';