From 77b2d32f75075c96f21713594a19927088c48bc9 Mon Sep 17 00:00:00 2001 From: Sebastien Hattry Date: Mon, 26 Jun 2023 12:56:35 +0000 Subject: [PATCH] Add CSP instructions --- app/Http/Middleware/SecureHeaders.php | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php index 4320d0a..1ec4765 100644 --- a/app/Http/Middleware/SecureHeaders.php +++ b/app/Http/Middleware/SecureHeaders.php @@ -46,10 +46,19 @@ class SecureHeaders // "default-src 'none';", "manifest-src 'self';", "connect-src 'self' blob: " . \implode(' ', [ + 'https://*.google-analytics.com', + 'https://*.analytics.google.com', 'https://*.googletagmanager.com', - 'https://*.analytics.google.com' + 'https://*.g.doubleclick.net', + 'https://*.google.com', + ]) . ';', + "img-src * data: blob: " . \implode(' ', [ + 'https://*.google-analytics.com', + 'https://*.analytics.google.com', + 'https://*.googletagmanager.com', + 'https://*.g.doubleclick.net', + 'https://*.google.com', ]) . ';', - "img-src * https://*.googletagmanager.com data: blob:;", 'frame-src ' . implode(' ', [ 'https://www.google.com/recaptcha/', 'https://recaptcha.google.com/recaptcha/',