diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php index daf511a..ae90423 100644 --- a/app/Http/Middleware/SecureHeaders.php +++ b/app/Http/Middleware/SecureHeaders.php @@ -51,7 +51,10 @@ class SecureHeaders "default-src 'none';", "manifest-src 'self';", // * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html - "connect-src 'self' blob:;", + "connect-src 'self' blob: " . implode(' ', [ + 'https://yl.s-web.fr', + 'https://api-adresse.data.gouv.fr' + ]) . ';', "img-src * data: blob:;", 'frame-src ' . implode(' ', [ 'https://www.google.com/recaptcha/', @@ -67,7 +70,8 @@ class SecureHeaders 'https://fonts.googleapis.com', 'https://cdn.jsdelivr.net', 'https://use.fontawesome.com', - 'https://fonts.googleapis.com' + 'https://fonts.googleapis.com', + ' https://unpkg.com/leaflet@1.9.3/dist/leaflet.css' ]) . ';', // ! If you dont use ckeditor use this // "style-src 'self' 'nonce-$nonce';", @@ -77,6 +81,7 @@ class SecureHeaders 'https://unpkg.com', 'https://www.googletagmanager.com', 'https://cdnjs.cloudflare.com', + 'https://unpkg.com/leaflet@1.9.3/dist/leaflet.js', "$scheme://www.google-analytics.com", ]) . ';' ];