ENHANCEMENT: implemented CSP

2022-02-01 14:29:41 +01:00 · 2022-02-01 14:29:41 +01:00 · ce70f7fdbc
commit ce70f7fdbc
parent c9b109601a
1 changed files with 3 additions and 0 deletions
--- a/lib/Framework/Router.php
+++ b/lib/Framework/Router.php
@ -39,6 +39,9 @@ class Router
            $response = $controllerObj->$action(...$method);

            if ($response instanceof Response) {
+                $response->headers->add([
+                    "Content-Security-Policy" => "default-src 'none'; font-src 'self'; style-src 'self'; script-src 'self'; img-src 'self'; require-trusted-types-for 'script'"
+                ]);
                return $response;
            } else {
                throw new InvalidArgumentException();