IntenseFinance/firefly-iii
3
0
Fork 0
mirror of https://github.com/firefly-iii/firefly-iii.git synced 2025-02-25 18:45:27 -06:00
Code Issues Packages Projects Releases Wiki Activity

Fixed missing CSP directive and value

Browse Source 
Signed-off-by: Luca Bognolo <git@bogny.eu>
This commit is contained in:
Luca Bognolo 2019-01-03 00:21:21 +01:00
parent 464642250b
commit ab0471c78e
No known key found for this signature in database
GPG Key ID: 99A80F6941A7F228
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/Http/Middleware/SecureHeaders.php
View File

@ -55,9 +55,10 @@ class SecureHeaders
"style-src 'self' 'unsafe-inline'", "style-src 'self' 'unsafe-inline'",
"base-uri 'self'", "base-uri 'self'",
"form-action 'self'", "form-action 'self'",
"font-src 'self'", "font-src 'self' data: https://fonts.gstatic.com",
"connect-src 'self'", "connect-src 'self'",
"img-src 'self' data: https://api.tiles.mapbox.com", "img-src 'self' data: https://api.tiles.mapbox.com",
"manifest-src 'self'",
]; ];
$featurePolicies = [ $featurePolicies = [