diff --git a/includes/security.php b/includes/security.php
index 14f7d52..cba3e6a 100644
--- a/includes/security.php
+++ b/includes/security.php
@@ -218,7 +218,7 @@ function setSecurityHeaders() {
$csp = "default-src 'self'; ";
$csp .= "style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; ";
- $csp .= "script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; ";
+ $csp .= "script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://plausible.io; "; // PLAUSIBLE UPDATED
// Images : autoriser les domaines externes plus HTTPS général en dev
$imgSrc = "'self' data: " . ($mastodonDomain ? $mastodonDomain : '') . " " . ($peertubeDomain ? $peertubeDomain : '');
@@ -241,7 +241,7 @@ function setSecurityHeaders() {
$csp .= "frame-src " . $frameSrc . "; ";
// Connexions : autoriser Mastodon et PeerTube
- $connectSrc = "'self' " . ($mastodonDomain ? $mastodonDomain : '') . " " . ($peertubeDomain ? $peertubeDomain : '');
+ $connectSrc = "'self' https://plausible.io " . ($mastodonDomain ? $mastodonDomain : '') . " " . ($peertubeDomain ? $peertubeDomain : '');
if ($isLocalDev) {
$connectSrc .= " ws: wss:"; // WebSockets pour le dev
}
diff --git a/index.php b/index.php
index 18ee71e..ef81e24 100644
--- a/index.php
+++ b/index.php
@@ -24,7 +24,7 @@ setSecurityHeaders();
-
+
@@ -33,7 +33,7 @@ setSecurityHeaders();
-
+
@@ -42,18 +42,18 @@ setSecurityHeaders();
-
+
-
+
'Accueil', 'url' => getBaseUrl()]
@@ -61,14 +61,14 @@ setSecurityHeaders();
$breadcrumbJsonLd = generateBreadcrumbJsonLd($breadcrumbs);
outputJsonLd($breadcrumbJsonLd);
?>
-
+
-
+