This commit is contained in:
the-djmaze 2022-11-06 14:45:12 +01:00
parent 95ce1b15ef
commit 84e0fa5756

View file

@ -84,7 +84,7 @@ class PageController extends Controller
$csp = new ContentSecurityPolicy();
$csp->addAllowedScriptDomain("'self'");
$csp->useStrictDynamic(true);
\method_exists($csp, 'useStrictDynamic') && $csp->useStrictDynamic(true); // NC24+
$csp->allowEvalScript(true); // $csp->addAllowedScriptDomain("'unsafe-eval'");
$csp->addAllowedStyleDomain("'self'");
$response->setContentSecurityPolicy($csp);