CSPPolicy.php (707B)
1 <?php 2 namespace App\Http; 3 4 use Spatie\Csp\Directive; 5 use Spatie\Csp\Keyword; 6 use Spatie\Csp\Policies\Basic; 7 use Spatie\Csp\Scheme; 8 9 class CSPPolicy extends Basic 10 { 11 public function configure() 12 { 13 parent::configure(); 14 15 $this->addDirective(Directive::SCRIPT, Keyword::UNSAFE_EVAL) 16 ->addDirective(Directive::STYLE, Keyword::UNSAFE_INLINE) 17 ->addDirective(Directive::CONNECT, Scheme::WSS) 18 ->addDirective(Directive::CONNECT, Scheme::WS) 19 ->addDirective(Directive::IMG, Scheme::DATA); 20 21 if (app()->environment() === 'local') { 22 $this 23 ->addDirective(Directive::SCRIPT, Keyword::UNSAFE_INLINE); 24 } 25 } 26 }