home-erp

git clone git://archive.git.mtrnord.blog/MTRNord/home-erp.git
Log | Files | Refs | README

CSPPolicy.php (707B)


      1 <?php
      2 namespace App\Http;
      3 
      4 use Spatie\Csp\Directive;
      5 use Spatie\Csp\Keyword;
      6 use Spatie\Csp\Policies\Basic;
      7 use Spatie\Csp\Scheme;
      8 
      9 class CSPPolicy extends Basic
     10 {
     11     public function configure()
     12     {
     13         parent::configure();
     14 
     15         $this->addDirective(Directive::SCRIPT, Keyword::UNSAFE_EVAL)
     16             ->addDirective(Directive::STYLE, Keyword::UNSAFE_INLINE)
     17             ->addDirective(Directive::CONNECT, Scheme::WSS)
     18             ->addDirective(Directive::CONNECT, Scheme::WS)
     19             ->addDirective(Directive::IMG, Scheme::DATA);
     20 
     21         if (app()->environment() === 'local') {
     22             $this
     23                 ->addDirective(Directive::SCRIPT, Keyword::UNSAFE_INLINE);
     24         }
     25     }
     26 }