38 lines
1.2 KiB
YAML
38 lines
1.2 KiB
YAML
|
nelmio_security:
|
||
|
|
# Content Security Policy (CSP)
|
||
|
|
csp:
|
||
|
|
enforce:
|
||
|
|
default-src: ["'self'"]
|
||
|
|
script-src:
|
||
|
|
- "'self'"
|
||
|
|
- "nonce"
|
||
|
|
- "https://sentry.esy-web.dev"
|
||
|
|
- "https://chat.esy-web.dev"
|
||
|
|
- "https://auth.esy-web.dev"
|
||
|
|
- "https://static.cloudflareinsights.com"
|
||
|
|
- "'strict-dynamic'"
|
||
|
|
connect-src:
|
||
|
|
- "'self'"
|
||
|
|
- "https://sentry.esy-web.dev"
|
||
|
|
- "https://chat.esy-web.dev"
|
||
|
|
- "https://auth.esy-web.dev"
|
||
|
|
- "https://cloudflareinsights.com"
|
||
|
|
frame-src:
|
||
|
|
- "'self'"
|
||
|
|
- "https://chat.esy-web.dev"
|
||
|
|
- "https://auth.esy-web.dev"
|
||
|
|
style-src:
|
||
|
|
- "'self'"
|
||
|
|
- "'unsafe-inline'"
|
||
|
|
- "https://chat.esy-web.dev"
|
||
|
|
img-src:
|
||
|
|
- "'self'"
|
||
|
|
- "data:"
|
||
|
|
- "https://chat.esy-web.dev"
|
||
|
|
font-src:
|
||
|
|
- "'self'"
|
||
|
|
- "data:"
|
||
|
|
frame-ancestors: ["'none'"]
|
||
|
|
# Optionnel : forcer le passage en HTTPS
|
||
|
|
upgrade-insecure-requests: false
|