Solve a problem with inline displaying of file attachments.

2024-11-30 12:43:57 -06:00 · 2018-10-07 18:41:02 +02:00 · 2018-10-07 18:41:02 +02:00 · 8088c28235
commit 8088c28235
parent 2ec310da18
1 changed files with 1 additions and 1 deletions
--- a/app/Http/Middleware/SecureHeaders.php
+++ b/app/Http/Middleware/SecureHeaders.php
@ -37,7 +37,6 @@ class SecureHeaders
     *
     * @param \Illuminate\Http\Request $request
     * @param \Closure                 $next
-     * @param string|null              $guard
     *
     * @return mixed
     */
@ -51,6 +50,7 @@ class SecureHeaders
        }
        $csp = [
            "default-src 'none'",
+            "object-src 'self'",
            sprintf("script-src 'self' 'unsafe-eval' 'unsafe-inline' %s", $google),
            "style-src 'self' 'unsafe-inline'",
            "base-uri 'self'",