diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php index 5306e54..c0c4d7f 100644 --- a/app/Http/Middleware/SecureHeaders.php +++ b/app/Http/Middleware/SecureHeaders.php @@ -48,9 +48,10 @@ class SecureHeaders "img-src * data:;", "frame-src *;", - "font-src 'self';", + "font-src 'self' https://fonts.gstatic.com;", + // ! reverted since https://github.com/vuejs/vue-style-loader/issues/33 // phpcs:ignore Generic.Files.LineLength.TooLong - "style-src 'self' https: 'nonce-$nonce' https://fonts.googleapis.com;", + "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;", // phpcs:ignore Generic.Files.LineLength.TooLong "script-src 'self' https: $jsDev https://cdnjs.cloudflare.com;" ];