mirror of
https://github.com/firefly-iii/firefly-iii.git
synced 2025-02-25 18:45:27 -06:00
Fix header
This commit is contained in:
parent
24e62b1cee
commit
f12e502eb8
@ -50,12 +50,12 @@ class SecureHeaders
|
|||||||
$csp = [
|
$csp = [
|
||||||
"default-src 'none'",
|
"default-src 'none'",
|
||||||
"object-src 'none'",
|
"object-src 'none'",
|
||||||
sprintf("script-src 'unsafe-eval' 'strict-dynamic' 'nonce-%1s' %2s", $nonce, $trackingScriptSrc),
|
sprintf("script-src 'unsafe-eval' 'strict-dynamic' 'nonce-%1s'", $nonce),
|
||||||
"style-src 'unsafe-inline' 'self'",
|
"style-src 'unsafe-inline' 'self'",
|
||||||
"base-uri 'self'",
|
"base-uri 'self'",
|
||||||
"font-src 'self' data:",
|
"font-src 'self' data:",
|
||||||
sprintf("connect-src 'self' %s", $trackingScriptSrc),
|
sprintf("connect-src 'self' %s", $trackingScriptSrc),
|
||||||
sprintf("img-src 'strict-dynamic' 'self' %s", $trackingScriptSrc),
|
sprintf("img-src 'strict-dynamic' 'self' 'nonce-%1s'", $nonce),
|
||||||
"manifest-src 'self'",
|
"manifest-src 'self'",
|
||||||
];
|
];
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user