fix(web): nonce Google tag loader

2026-10-16 00:27:16 +02:00
parent 9119599e45
commit 274ca6f5ca
2 changed files with 2 additions and 1 deletions
@@ -46,7 +46,7 @@ function contentSecurityPolicy(nonce: string): string {
  const mediaOrigin = new URL(STRAPI_URL).origin;
  const directives = [
    "default-src 'self'",
-    `script-src 'self' 'nonce-${nonce}' https://www.googletagmanager.com`,
+    `script-src 'self' 'nonce-${nonce}' 'strict-dynamic' https://www.googletagmanager.com`,
    "script-src-attr 'none'",
    "style-src 'self' 'unsafe-inline'",
    `img-src 'self' ${mediaOrigin} https://www.google-analytics.com data: blob:`,