Provide an accept CSP policy for global search pictures

Signed-off-by: Thomas Citharel <tcit@tcit.fr>

lib/web/plugs/http_security_plug.ex

@@ -10,6 +10,7 @@ defmodule Mobilizon.Web.Plugs.HTTPSecurityPlug do
 
   alias Mobilizon.Config
   alias Mobilizon.Service.FrontEndAnalytics
+  alias Mobilizon.Service.GlobalSearch
   import Plug.Conn
 
   require Logger
@@ -139,7 +140,8 @@ defmodule Mobilizon.Web.Plugs.HTTPSecurityPlug do
   defp get_csp_config(type, options) do
     config_policy = Keyword.get(options, type, Config.get([:http_security, :csp_policy, type]))
     front_end_analytics_policy = [Keyword.get(FrontEndAnalytics.csp(), type, [])]
+    global_search_policy = [Keyword.get(GlobalSearch.service().csp(), type, [])]
 
-    Enum.join(config_policy ++ front_end_analytics_policy, " ")
+    Enum.join(config_policy ++ front_end_analytics_policy ++ global_search_policy, " ")
   end
 end