forge-joniko/ldc-lionor
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'develop' into trunk

Browse source
This commit is contained in:
Jérémy Munsch 2023-10-25 12:22:41 +02:00
commit ecb359a73a
No known key found for this signature in database
GPG key ID: 18361AF3BFEC0FEC
1 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
app/Http/Middleware/SecureHeaders.php
View file

@ -51,7 +51,10 @@ class SecureHeaders
"default-src 'none';",
"manifest-src 'self';",
// * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html
"connect-src 'self' blob:;",
"connect-src 'self' blob: " . implode(' ', [
'https://yl.s-web.fr',
'https://api-adresse.data.gouv.fr'
]) . ';',
"img-src * data: blob:;",
'frame-src ' . implode(' ', [
'https://www.google.com/recaptcha/',
@ -67,7 +70,8 @@ class SecureHeaders
'https://fonts.googleapis.com',
'https://cdn.jsdelivr.net',
'https://use.fontawesome.com',
'https://fonts.googleapis.com'
'https://fonts.googleapis.com',
' https://unpkg.com/leaflet@1.9.3/dist/leaflet.css'
]) . ';',
// ! If you dont use ckeditor use this
// "style-src 'self' 'nonce-$nonce';",
@ -77,6 +81,7 @@ class SecureHeaders
'https://unpkg.com',
'https://www.googletagmanager.com',
'https://cdnjs.cloudflare.com',
'https://unpkg.com/leaflet@1.9.3/dist/leaflet.js',
"$scheme://www.google-analytics.com",
]) . ';'
];