forge-joniko/ldc-loue
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix security Headers

Browse source
This commit is contained in:
Jérémy Munsch 2022-06-12 16:44:40 +02:00
parent bf9526fe19
commit eb1fb1873a
No known key found for this signature in database
GPG key ID: 18361AF3BFEC0FEC
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/Http/Middleware/SecureHeaders.php
View file

@ -45,8 +45,8 @@ class SecureHeaders
$cspPolicies = [ $cspPolicies = [
"default-src 'none';", "default-src 'none';",
// * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html // * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html
"connect-src 'self';", "connect-src 'self' blob:;",
"img-src * data:;", "img-src * data: blob:;",
"frame-src https://www.youtube.com;", "frame-src https://www.youtube.com;",
"font-src 'self' data:;", "font-src 'self' data:;",
// ! Using CKEditor wiill must have unsafe-inline style // ! Using CKEditor wiill must have unsafe-inline style