forge-joniko/ldc-supportweb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'hotfix'

Browse source
This commit is contained in:
Jérémy Munsch 2022-06-09 18:32:52 +02:00
commit ef707a48b6
No known key found for this signature in database
GPG key ID: 18361AF3BFEC0FEC
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
app/Http/Middleware/SecureHeaders.php
View file

@ -44,11 +44,11 @@ class SecureHeaders
$response->headers->set('Strict-Transport-Security', 'max-age=31536000; includeSubDomains;');
$cspPolicies = [
// * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html
"connect-src 'self'",
"img-src * data:",
"frame-src *",
"connect-src 'self';",
"img-src * data:;",
"frame-src *;",
"font-src 'self'",
"font-src 'self';",
// phpcs:ignore Generic.Files.LineLength.TooLong
"style-src 'self' https: 'nonce-$nonce' https://fonts.googleapis.com;",
// phpcs:ignore Generic.Files.LineLength.TooLong