JeroenED/website
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

ENHANCEMENT: implemented CSP

Browse Source
This commit is contained in:
Jeroen De Meerleer 2022-02-01 14:29:41 +01:00
parent c9b109601a
commit ce70f7fdbc
Signed by: JeroenED
GPG Key ID: 28CCCB8F62BFADD6
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/Framework/Router.php
View File

@ -39,6 +39,9 @@ class Router
$response = $controllerObj->$action(...$method); $response = $controllerObj->$action(...$method);
if ($response instanceof Response) { if ($response instanceof Response) {
$response->headers->add([
"Content-Security-Policy" => "default-src 'none'; font-src 'self'; style-src 'self'; script-src 'self'; img-src 'self'; require-trusted-types-for 'script'"
]);
return $response; return $response;
} else { } else {
throw new InvalidArgumentException(); throw new InvalidArgumentException();