<?php header("Access-Control-Allow-Origin: 'self'"); // en node : res.header("Access-Control-Allow-Origin", "*"); // cf : https://dzone.com/articles/cors-in-node // https://developer.mozilla.org/fr/docs/Web/HTTP/CORS ?> <!DOCTYPE html> <html> <head> <meta charset="utf-8"> <title>jQuery Query</title> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <style> </style> </head> <body> <img src="https://randomwordgenerator.com/img/picture-generator/53e4d5464e54a514f1dc8460962e33791c3ad6e04e507749742c78d7974ec3_640.jpg" /> <script> $(document).ready(function() { //alert('ok'); $.get("https://api.geoapify.com/v1/geocode/search?text=12+rue+Maupertuit%2C+Bruz&apiKey=bc1e13327f7f4876902d4bc45c30e102", function(data, status){ alert("Data: " + data + "\nStatus: " + status); }); eval("alert('coucou')"); }); </script> <pre> <Directory "/home/agence-polux/www.new/www/wp-admin"> Header set Content-Security-Policy \ " \ script-src 'unsafe-eval' 'unsafe-inline' 'self' ssl.google-analytics.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com tarteaucitron.io www.tarteaucitron.io; \ default-src 'none'; \ connect-src 'self'; \ img-src 'self' 'unsafe-inline' data: ssl.google-analytics.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com tarteaucitron.io www.tarteaucitron.io; \ style-src 'self' 'unsafe-inline' ssl.google-analytics.com tarteaucitron.io www.tarteaucitron.io; \ base-uri 'self'; \ font-src 'self' data:; \ " </Directory> <Directory "/home/dev.polux.studio/mds/site"> Header set Content-Security-Policy \ " \ script-src 'unsafe-inline' 'unsafe-eval' 'self' code.jquery.com; \ default-src 'none'; \ connect-src 'self' api.geoapify.com; \ img-src 'self' 'unsafe-inline' randomwordgenerator.com; \ style-src 'self' 'unsafe-inline'; \ base-uri 'self'; \ font-src 'self' data:; \ " </Directory> </pre> </body> </html>