Be backwards compatible.

This commit is contained in:
James Cole 2020-01-09 17:04:10 +01:00
parent 8c6f8460a2
commit 7f002eb6a9
No known key found for this signature in database
GPG Key ID: C16961E655E74B5E

View File

@ -59,7 +59,7 @@ class SecureHeaders
$csp = [
"default-src 'none'",
"object-src 'self'",
sprintf("script-src 'nonce-%s' unsafe-inline %s", $nonce, $google),
sprintf("script-src 'nonce-%s' 'unsafe-inline' %s", $nonce, $google),
"style-src 'self' 'unsafe-inline'",
"base-uri 'self'",
"font-src 'self' data:",