From 8318e83d0ba6855aed23b71192ae73ab03d92f8d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=A9my=20Munsch?= <jeremy.munsch@ldc.fr>
Date: Fri, 22 Dec 2023 11:23:25 +0100
Subject: [PATCH] Update secure header with vite config form base project

---
 app/Http/Middleware/SecureHeaders.php | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php
index cc17112..48b78a4 100644
--- a/app/Http/Middleware/SecureHeaders.php
+++ b/app/Http/Middleware/SecureHeaders.php
@@ -59,7 +59,10 @@ class SecureHeaders
                 config('app.debug') ? "https://{$host}:4443" : '',
                 'https://yl.s-web.fr',
             ]) . ';',
-            "img-src * https://yl.s-web.fr data: blob:;",
+            "img-src 'self' data: blob: " . implode(' ', [
+                // * VITE DEV
+                config('app.debug') ? "https://{$host}:4443" : ''
+            ]) . ';',
             'frame-src ' . implode(' ', [
                 'https://www.google.com/recaptcha/',
                 'https://recaptcha.google.com/recaptcha/',