forge-joniko/ldc-doux
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'addCSP' into 'develop'

Browse source 
Add CSP instructions

See merge request ldc-web/projets/doux!12
This commit is contained in:
Vincent BRIDIER 2023-06-26 13:02:58 +00:00
commit 316cdf3e03
1 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
app/Http/Middleware/SecureHeaders.php
View file

@ -46,10 +46,19 @@ class SecureHeaders
// "default-src 'none';",
"manifest-src 'self';",
"connect-src 'self' blob: " . \implode(' ', [
'https://*.google-analytics.com',
'https://*.analytics.google.com',
'https://*.googletagmanager.com',
'https://*.analytics.google.com'
'https://*.g.doubleclick.net',
'https://*.google.com',
]) . ';',
"img-src * data: blob: " . \implode(' ', [
'https://*.google-analytics.com',
'https://*.analytics.google.com',
'https://*.googletagmanager.com',
'https://*.g.doubleclick.net',
'https://*.google.com',
]) . ';',
"img-src * https://*.googletagmanager.com data: blob:;",
'frame-src ' . implode(' ', [
'https://www.google.com/recaptcha/',
'https://recaptcha.google.com/recaptcha/',