From 7649edf59f28a35ad095a3fb5c9d2d73daf0901c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=A9r=C3=A9my=20Munsch?= Date: Thu, 30 Jun 2022 17:00:08 +0200 Subject: [PATCH] add missing manifest-src on secure headers --- app/Http/Middleware/SecureHeaders.php | 1 + 1 file changed, 1 insertion(+) diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php index 633ec2b..213cb20 100644 --- a/app/Http/Middleware/SecureHeaders.php +++ b/app/Http/Middleware/SecureHeaders.php @@ -44,6 +44,7 @@ class SecureHeaders $response->headers->set('Strict-Transport-Security', 'max-age=31536000; includeSubDomains;'); $cspPolicies = [ "default-src 'none';", + "manifest-src 'self';", // * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html "connect-src 'self' blob:;", "img-src * data: blob:;",