forge-joniko/ldc-supportweb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revert to unsafe inline force by vuejs style loader

Browse source 
https://github.com/vuejs/vue-style-loader/issues/33
This commit is contained in:
Jérémy Munsch 2022-06-09 18:51:40 +02:00
parent 2d141d74ed
commit b13059715d
No known key found for this signature in database
GPG key ID: 18361AF3BFEC0FEC
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
app/Http/Middleware/SecureHeaders.php
View file

@ -48,9 +48,10 @@ class SecureHeaders
"img-src * data:;",
"frame-src *;",
"font-src 'self';",
"font-src 'self' https://fonts.gstatic.com;",
// ! reverted since https://github.com/vuejs/vue-style-loader/issues/33
// phpcs:ignore Generic.Files.LineLength.TooLong
"style-src 'self' https: 'nonce-$nonce' https://fonts.googleapis.com;",
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;",
// phpcs:ignore Generic.Files.LineLength.TooLong
"script-src 'self' https: $jsDev https://cdnjs.cloudflare.com;"
];