forge-joniko/ldc-doux
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add CSP instructions

Browse source
This commit is contained in:
Sebastien Hattry 2023-06-26 12:56:35 +00:00
parent 16505c9cad
commit 77b2d32f75
1 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
app/Http/Middleware/SecureHeaders.php
View file

@ -46,10 +46,19 @@ class SecureHeaders
// "default-src 'none';",
"manifest-src 'self';",
"connect-src 'self' blob: " . \implode(' ', [
'https://*.google-analytics.com',
'https://*.analytics.google.com',
'https://*.googletagmanager.com',
'https://*.analytics.google.com'
'https://*.g.doubleclick.net',
'https://*.google.com',
]) . ';',
"img-src * data: blob: " . \implode(' ', [
'https://*.google-analytics.com',
'https://*.analytics.google.com',
'https://*.googletagmanager.com',
'https://*.g.doubleclick.net',
'https://*.google.com',
]) . ';',
"img-src * https://*.googletagmanager.com data: blob:;",
'frame-src ' . implode(' ', [
'https://www.google.com/recaptcha/',
'https://recaptcha.google.com/recaptcha/',