4 Commits

Author	SHA1	Message	Date
lebaudantoine	53722ad1bc	🩹(frontend) fix CSP regression breaking inline styles and ProConnect ... A previous CSP change suggested by CodeRabbit was not properly tested and broke inline styling as well as the loading of the ProConnect image. Adjust the CSP directives to allow these resources again.	2026-06-12 15:54:26 +02:00
lebaudantoine	69a6dd1463	🩹(frontend) fix missing default-src in CSP configuration ... The CSP was missing a default-src directive (flagged by CodeRabbit). Without it, styles, images, fonts, and media are completely unrestricted, which undercuts the otherwise strict policy. Set default-src to 'self' and add an explicit style-src directive since we rely on inline styles (e.g. #close-msg and the view toggling use inline style attributes), so style-src needs to allow 'self' and 'unsafe-inline'.	2026-06-11 15:16:52 +02:00
lebaudantoine	da1767c261	♻️(frontend) refine Nginx config for DINUM frontend ... Lint and clean up the Nginx configuration. Fix an issue affecting static asset serving.	2026-04-30 18:56:15 +02:00
lebaudantoine	3d125e940f	🩹(frontend) rename Nginx config to override default configuration ... Rename the configuration file to `default.conf` so it replaces the default config bundled in the Nginx image. Handles properly 404 path.	2026-04-30 00:21:31 +02:00