diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php index cc17112..48b78a4 100644 --- a/app/Http/Middleware/SecureHeaders.php +++ b/app/Http/Middleware/SecureHeaders.php @@ -59,7 +59,10 @@ class SecureHeaders config('app.debug') ? "https://{$host}:4443" : '', 'https://yl.s-web.fr', ]) . ';', - "img-src * https://yl.s-web.fr data: blob:;", + "img-src 'self' data: blob: " . implode(' ', [ + // * VITE DEV + config('app.debug') ? "https://{$host}:4443" : '' + ]) . ';', 'frame-src ' . implode(' ', [ 'https://www.google.com/recaptcha/', 'https://recaptcha.google.com/recaptcha/',