diff --git a/docker/dinum-frontend/nginx/default.conf b/docker/dinum-frontend/nginx/default.conf index e5b2b71b..4e88da8d 100644 --- a/docker/dinum-frontend/nginx/default.conf +++ b/docker/dinum-frontend/nginx/default.conf @@ -45,13 +45,14 @@ server { add_header Expires 0 always; set $ms_domains "https://*.live.com https://*.office.com https://*.microsoft.com https://*.office365.com https://*.sharepoint.com https://*.cloud.microsoft"; + set $ministries_domains "https://courrieljf.ccomptes.fr"; set $nonce $request_id; set $csp "upgrade-insecure-requests; "; - set $csp "${csp}frame-ancestors ${ms_domains}; "; + set $csp "${csp}frame-ancestors ${ms_domains} ${ministries_domains}; "; set $csp "${csp}script-src 'nonce-${nonce}' 'strict-dynamic'; "; - set $csp "${csp}connect-src 'self' ${ms_domains}; "; + set $csp "${csp}connect-src 'self' ${ms_domains} ${ministries_domains}; "; set $csp "${csp}frame-src 'none'; "; set $csp "${csp}object-src 'none'; "; set $csp "${csp}base-uri 'none'; ";