From 8668c6a38c729d3be6d93fbe8eace91176e21622 Mon Sep 17 00:00:00 2001 From: Sebastien Hattry Date: Tue, 24 Oct 2023 16:11:24 +0200 Subject: [PATCH] Add CSP execptions rules for cookies --- app/Http/Middleware/SecureHeaders.php | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php index cb1dc2a..9135e31 100644 --- a/app/Http/Middleware/SecureHeaders.php +++ b/app/Http/Middleware/SecureHeaders.php @@ -56,8 +56,9 @@ class SecureHeaders // * VITE DEV config('app.debug') ? "wss://vite.{$host}:4443" : '', config('app.debug') ? "https://vite.{$host}:4443" : '', + 'https://yl.s-web.fr', ]) . ';', - "img-src * data: blob:;", + "img-src * https://yl.s-web.fr data: blob:;", 'frame-src ' . implode(' ', [ 'https://www.google.com/recaptcha/', 'https://recaptcha.google.com/recaptcha/', @@ -89,6 +90,9 @@ class SecureHeaders config('app.debug') ? "https://vite.{$host}:4443" : '', 'https://www.googletagmanager.com', 'https://cdnjs.cloudflare.com', + 'https://www.google.com/recaptcha/', + 'https://www.gstatic.com/recaptcha/', + 'https://yl.s-web.fr', "$scheme://www.google-analytics.com", ]) . ';' ];