chore: wip

SocialGouv · Feb 4, 2025 · 7dbd770 · 7dbd770
1 parent 75d53b6
commit 7dbd770
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 12 deletions.
diff --git a/packages/app/sentry.client.config.ts b/packages/app/sentry.client.config.ts
@@ -14,6 +14,9 @@ Sentry.init({
   environment: ENVIRONMENT,
   debug: true, // Temporarily enable debug mode to troubleshoot
 
+  // Enable tunneling to avoid ad-blockers
+  tunnel: "/monitoring-tunnel",
+
   // Performance monitoring
   enableTracing: true,
   tracesSampleRate: IS_PRODUCTION ? 0.1 : 1.0, // Sample 10% of traces in prod, all in dev

diff --git a/packages/app/src/middleware.ts b/packages/app/src/middleware.ts
@@ -5,16 +5,6 @@ import { NextResponse } from "next/server";
 import { type NextMiddlewareWithAuth, withAuth } from "next-auth/middleware";
 
 const cspMiddleware: NextMiddlewareWithAuth = req => {
-  // Parse Sentry URL to get domain for CSP
-  let sentryDomain = "";
-  try {
-    if (process.env.SENTRY_URL) {
-      const url = new URL(process.env.SENTRY_URL);
-      sentryDomain = url.hostname;
-    }
-  } catch (e) {
-    console.warn("Failed to parse SENTRY_URL:", e);
-  }
   //const nonce = Buffer.from(crypto.randomUUID()).toString("base64");
 
   // In dev environment, Next injects scripts for HMR, so we need to desactivate script-src.
@@ -46,8 +36,8 @@ const cspMiddleware: NextMiddlewareWithAuth = req => {
   // }
 
   const cspHeader = `
-    default-src 'self' https://*.gouv.fr${sentryDomain ? ` https://${sentryDomain}` : ""};
-    connect-src 'self' https://*.gouv.fr${sentryDomain ? ` https://${sentryDomain}` : ""};
+    default-src 'self' https://*.gouv.fr;
+    connect-src 'self' https://*.gouv.fr;
     font-src 'self' data: blob:;
     media-src 'self' https://*.gouv.fr;
     img-src 'self' data: https://*.gouv.fr;