jonny/jonnybarnes.uk
1
0
Fork 0
Code Issues 8 Pull requests Projects Releases 5 Packages Wiki Activity Actions

Update dependencies and improve CSP headers

Browse source
This commit is contained in:
Jonny Barnes 2018-04-14 18:46:40 +01:00
parent 5758a270c6
commit 7eacb52723
4 changed files with 66 additions and 61 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/Http/Middleware/CSPHeader.php
View file

@ -47,7 +47,8 @@ p.typekit.net; \
font-src 'self' \
https://fonts.gstatic.com \
use.typekit.net \
fonts.typekit.net; \
fonts.typekit.net \
data:; \
connect-src 'self' \
https://api.mapbox.com \
https://*.tiles.mapbox.com \
@ -55,7 +56,6 @@ performance.typekit.net \
data: blob:; \
worker-src 'self' blob:; \
frame-src 'self' https://www.youtube.com blob:; \
child-src 'self' blob:; \
upgrade-insecure-requests; \
block-all-mixed-content; \
report-to csp-endpoint; \