Skip to content

Commit

Permalink
feat: Revert trackers (#3471)
Browse files Browse the repository at this point in the history
* Revert "fix: Fix les CSP pour le tracker Snapchat (#3468)"

This reverts commit 1359f95.

* Revert "feat: Ajoute le tracker Snapchat (#3463)"

This reverts commit ec7df05.

* Revert "fix: Fix appel tracker floodlight sur bonne page (#3458)"

This reverts commit 5f423e4.

* Revert "fix: Fix CSP tracker Google tag manager (#3456)"

This reverts commit f59d3b1.

* Revert "fix: Fix le tracker floodlight (#3455)"

This reverts commit 0b55a4a.

* Revert "feat: Ajoute le service floodlight (#3435)"

This reverts commit 975b0f5.
  • Loading branch information
Mintoo200 authored and sokl-octo committed Jan 24, 2025
1 parent c1a263f commit 0c074ab
Show file tree
Hide file tree
Showing 26 changed files with 172 additions and 1,324 deletions.
2 changes: 0 additions & 2 deletions .storybook/main.ts
Original file line number Diff line number Diff line change
@@ -1,5 +1,3 @@
// @ts-nocheck

import type { StorybookConfig } from "@storybook/nextjs";
const path = require('path');

Expand Down
8 changes: 3 additions & 5 deletions config/headers.js
Original file line number Diff line number Diff line change
Expand Up @@ -3,17 +3,15 @@ const LOCAL_MODE_HEADERS = [];
const STRAPI_MEDIA_HOST = new URL(process.env.STRAPI_MEDIA_URL).hostname;
const TRUSTED_SOURCES = '*.fabrique.social.gouv.fr *.meilisearch.io/multi-search *.meilisearch.com/multi-search 1j1s-front.osc-fr1.scalingo.io *.1jeune1solution.gouv.fr';
const ANALYTICS_SOURCES = `${process.env.NEXT_PUBLIC_ANALYTICS_DOMAIN} ${process.env.NEXT_PUBLIC_ANALYTICS_MATOMO_HOST}`;
// FIXME (GAFI 16-10-2024): Si on passait par un Record<CSPKeys, string[]>, ça pourrait nous éviter les typos et améliorer la lisibilité
const contentSecurityPolicy = `
default-src 'self' ${TRUSTED_SOURCES};
script-src 'self' ${ANALYTICS_SOURCES} https://*.adform.net www.googletagmanager.com analytics.tiktok.com *.adnxs.com *.adsrvr.org *.facebook.com *.facebook.net sc-static.net tr.snapchat.com;
img-src 'self' *.google.com data: ${STRAPI_MEDIA_HOST} ${ANALYTICS_SOURCES} img.youtube.com jedonnemonavis.numerique.gouv.fr *.adnxs.com *.adsrvr.org *.doubleclick.net p1.zemanta.com *.facebook.com;
script-src 'self' ${ANALYTICS_SOURCES} https://*.adform.net;
img-src 'self' *.google.com data: ${STRAPI_MEDIA_HOST} ${ANALYTICS_SOURCES} img.youtube.com jedonnemonavis.numerique.gouv.fr;
style-src 'self' 'unsafe-inline' ${ANALYTICS_SOURCES};
frame-ancestors 'none';
frame-src 'self' *.apprentissage.beta.gouv.fr immersion-facile.beta.gouv.fr deposer-offre.www.1jeune1solution.gouv.fr *.youtube-nocookie.com simulateur-alternance.1jeune1solution.gouv.fr https://*.adform.net mes-aides.francetravail.fr *.doubleclick.net *.adsrvr.org tr.snapchat.com;
frame-src 'self' *.apprentissage.beta.gouv.fr immersion-facile.beta.gouv.fr deposer-offre.www.1jeune1solution.gouv.fr *.youtube-nocookie.com simulateur-alternance.1jeune1solution.gouv.fr https://*.adform.net mes-aides.francetravail.fr;
form-action 'self';
base-uri 'none';
connect-src 'self' ${TRUSTED_SOURCES} analytics.tiktok.com *.facebook.com *.adnxs.com www.google.com tr.snapchat.com;
`;

const SECURITY_MODE_HEADERS = [{
Expand Down
Loading

0 comments on commit 0c074ab

Please sign in to comment.