add missing manifest-src on secure headers

2022-06-30 17:00:08 +02:00 · 2022-06-30 17:00:08 +02:00 · 7649edf59f
commit 7649edf59f
parent 76549f4eb8
1 changed files with 1 additions and 0 deletions
--- a/app/Http/Middleware/SecureHeaders.php
+++ b/app/Http/Middleware/SecureHeaders.php
@ -44,6 +44,7 @@ class SecureHeaders
        $response->headers->set('Strict-Transport-Security', 'max-age=31536000; includeSubDomains;');
        $cspPolicies = [
            "default-src 'none';",
+            "manifest-src 'self';",
            // * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html
            "connect-src 'self' blob:;",
            "img-src * data: blob:;",