[CSP] explicitly authorize stats.data.gouv.fr/piwik.js

gip-inclusion · Sep 26, 2023 · 48580c7 · 48580c7
1 parent f744834
commit 48580c7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/settings/base.py b/config/settings/base.py
@@ -362,6 +362,7 @@
     "'self'",
     "https://cdn.jsdelivr.net",
     "https://tally.so",
+    "https://stats.data.gouv.fr/piwik.js",
 )
 CSP_SCRIPT_SRC_ELEM = CSP_SCRIPT_SRC
 CSP_FRAME_SRC = ("'self'", "https://tally.so")