tiradoe/movie-night-nuevo
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

nonce fix
Some checks are pending
linter / quality (push) Waiting to run
Details
tests / ci (push) Waiting to run
Details

Browse source
This commit is contained in:
Edward Tirado Jr 2025-12-14 23:20:26 -06:00
parent efe979768c
commit b2b8bca9ea
1 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
app/Http/Middleware/AddContentSecurityPolicy.php
View file

@ -24,9 +24,8 @@ class AddContentSecurityPolicy
"style-src 'self' 'unsafe-inline' http: https:; " . "style-src 'self' 'unsafe-inline' http: https:; " .
"connect-src 'self' ws: http: https:;"; "connect-src 'self' ws: http: https:;";
} else { } else {
// Production CSP - Livewire v3 requires unsafe-eval and nonce for inline scripts // Production CSP - Livewire v3 requires unsafe-eval and unsafe-inline
$nonce = csp_nonce(); $csp = "script-src 'self' 'unsafe-eval' 'unsafe-inline' https:; " .
$csp = "script-src 'self' 'unsafe-eval' 'nonce-{$nonce}' https:; " .
"style-src 'self' 'unsafe-inline' https:; " . "style-src 'self' 'unsafe-inline' https:; " .
"connect-src 'self' https:;"; "connect-src 'self' https:;";
} }