forge-joniko/ldc-doux
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'issue-13-csp-style' into 'develop'

Browse source 
fix: Added 'https://cdn.jsdelivr.net' to style-src csp

See merge request ldc-web/projets/doux!28
This commit is contained in:
noah.lancien 2024-08-08 13:25:45 +00:00
commit e9331bd63d
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
app/Http/Middleware/SecureHeaders.php
View file

@ -54,7 +54,11 @@ class SecureHeaders
// "font-src 'self' data:;",
// ! Using CKEditor will must have unsafe-inline style
// phpcs:ignore Generic.Files.LineLength.TooLong
"style-src 'self' 'unsafe-inline';",
'style-src ' . implode(" ", [
'\'self\'',
'\'unsafe-inline\'',
'https://cdn.jsdelivr.net',
]) . ';',
// ! If you dont use ckeditor use this
// "style-src 'self' 'nonce-$nonce';",
// phpcs:ignore Generic.Files.LineLength.TooLong