feat: unsafe-eval not on prod

incubateur-ademe · Nov 26, 2024 · 3764bdf · 3764bdf
1 parent d7fa7c8
commit 3764bdf
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/next.config.mjs b/next.config.mjs
@@ -27,11 +27,10 @@ const csp = {
   "script-src": [
     "'self'",
     "'unsafe-inline'",
-    "'unsafe-eval'",
     "https://stats.beta.gouv.fr",
     "https://tally.so",
     process.env.PACOUPA_ENV === "preprod" && "https://vercel.live",
-    process.env.NODE_ENV === "development" && "'unsafe-eval' http://localhost",
+    process.env.NODE_ENV !== "prod" && "'unsafe-eval'",
   ],
   "style-src": ["'self'", "'unsafe-inline'"],
   "object-src": ["'self'", "data:"],