forge-joniko/ldc-agis
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add CSP execptions rules for cookies

Browse source
This commit is contained in:
Sebastien Hattry 2023-10-24 16:11:24 +02:00
parent 6e01470b5c
commit 8668c6a38c
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
app/Http/Middleware/SecureHeaders.php
View file

@ -56,8 +56,9 @@ class SecureHeaders
// * VITE DEV
config('app.debug') ? "wss://vite.{$host}:4443" : '',
config('app.debug') ? "https://vite.{$host}:4443" : '',
'https://yl.s-web.fr',
]) . ';',
"img-src * data: blob:;",
"img-src * https://yl.s-web.fr data: blob:;",
'frame-src ' . implode(' ', [
'https://www.google.com/recaptcha/',
'https://recaptcha.google.com/recaptcha/',
@ -89,6 +90,9 @@ class SecureHeaders
config('app.debug') ? "https://vite.{$host}:4443" : '',
'https://www.googletagmanager.com',
'https://cdnjs.cloudflare.com',
'https://www.google.com/recaptcha/',
'https://www.gstatic.com/recaptcha/',
'https://yl.s-web.fr',
"$scheme://www.google-analytics.com",
]) . ';'
];