forge-joniko/ldc-doux
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: Added 'https://cdn.jsdelivr.net' to style-src csp

Browse source
This commit is contained in:
Noah Lancien 2024-08-08 15:23:42 +02:00
parent 368f43e73f
commit a7c5d2d9b2
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
app/Http/Middleware/SecureHeaders.php
View file

@ -54,7 +54,11 @@ class SecureHeaders
// "font-src 'self' data:;",
// ! Using CKEditor will must have unsafe-inline style
// phpcs:ignore Generic.Files.LineLength.TooLong
"style-src 'self' 'unsafe-inline';",
'style-src ' . implode(" ", [
'\'self\'',
'\'unsafe-inline\'',
'https://cdn.jsdelivr.net',
]) . ';',
// ! If you dont use ckeditor use this
// "style-src 'self' 'nonce-$nonce';",
// phpcs:ignore Generic.Files.LineLength.TooLong