diff --git a/includes/security.php b/includes/security.php index 14f7d52..cba3e6a 100644 --- a/includes/security.php +++ b/includes/security.php @@ -218,7 +218,7 @@ function setSecurityHeaders() { $csp = "default-src 'self'; "; $csp .= "style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; "; - $csp .= "script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; "; + $csp .= "script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://plausible.io; "; // PLAUSIBLE UPDATED // Images : autoriser les domaines externes plus HTTPS général en dev $imgSrc = "'self' data: " . ($mastodonDomain ? $mastodonDomain : '') . " " . ($peertubeDomain ? $peertubeDomain : ''); @@ -241,7 +241,7 @@ function setSecurityHeaders() { $csp .= "frame-src " . $frameSrc . "; "; // Connexions : autoriser Mastodon et PeerTube - $connectSrc = "'self' " . ($mastodonDomain ? $mastodonDomain : '') . " " . ($peertubeDomain ? $peertubeDomain : ''); + $connectSrc = "'self' https://plausible.io " . ($mastodonDomain ? $mastodonDomain : '') . " " . ($peertubeDomain ? $peertubeDomain : ''); if ($isLocalDev) { $connectSrc .= " ws: wss:"; // WebSockets pour le dev } diff --git a/index.php b/index.php index 18ee71e..ef81e24 100644 --- a/index.php +++ b/index.php @@ -24,7 +24,7 @@ setSecurityHeaders(); - + @@ -33,7 +33,7 @@ setSecurityHeaders(); - + @@ -42,18 +42,18 @@ setSecurityHeaders(); - + - + 'Accueil', 'url' => getBaseUrl()] @@ -61,14 +61,14 @@ setSecurityHeaders(); $breadcrumbJsonLd = generateBreadcrumbJsonLd($breadcrumbs); outputJsonLd($breadcrumbJsonLd); ?> - + - +