Skip to content

GitLab

Commit 76be6071 authored by Julien BOUYER's avatar Julien BOUYER
Browse files

UNOTOPLYS-83 fix(front) : correction de l'erreur CSP

parent ad9d9b24
Hide whitespace changes
Inline Side-by-side
src/main/java/com/unantes/orientactive/config/SecurityConfiguration.java
View file @ 76be6071
......@@ -63,8 +63,8 @@ public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
.accessDeniedHandler(problemSupport)
.and()
.headers()
.contentSecurityPolicy("default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:")
.and()
.contentSecurityPolicy("default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' fonts.googleapis.com 'unsafe-inline'; img-src 'self' data:; font-src 'self' fonts.gstatic.com")
.and()
.referrerPolicy(ReferrerPolicyHeaderWriter.ReferrerPolicy.STRICT_ORIGIN_WHEN_CROSS_ORIGIN)
.and()
.featurePolicy("geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'")
......
src/main/webapp/index.html
View file @ 76be6071
......@@ -12,8 +12,8 @@
<link href="./content/images/icons/apple-touch-icon.png" rel="apple-touch-icon" sizes="180x180">
<link href="./content/images/icons/favicon-32x32.png" rel="icon" sizes="32x32" type="image/png">
<link href="./content/images/icons/favicon-16x16.png" rel="icon" sizes="16x16" type="image/png">
<link href="manifest.webapp" rel="manifest"/>
<link href="content/css/form.css" rel="stylesheet">
<link href="./manifest.webapp" rel="manifest"/>
<link href="./content/css/form.css" rel="stylesheet">
<!-- jhipster-needle-add-resources-to-root - JHipster will add new resources here -->
</head>
<body>
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment