csp.php (1074B)
1 <?php 2 3 return [ 4 5 /* 6 * A policy will determine which CSP headers will be set. A valid CSP policy is 7 * any class that extends `Spatie\Csp\Policies\Policy` 8 */ 9 'policy' => \App\Http\CSPPolicy::class, 10 11 /* 12 * This policy which will be put in report only mode. This is great for testing out 13 * a new policy or changes to existing csp policy without breaking anything. 14 */ 15 'report_only_policy' => '', 16 17 /* 18 * All violations against the policy will be reported to this url. 19 * A great service you could use for this is https://report-uri.com/ 20 * 21 * You can override this setting by calling `reportTo` on your policy. 22 */ 23 'report_uri' => env('CSP_REPORT_URI', ''), 24 25 /* 26 * Headers will only be added if this setting is set to true. 27 * 28 * Currently broken due to livewire 29 */ 30 'enabled' => env('CSP_ENABLED', false), 31 32 /* 33 * The class responsible for generating the nonces used in inline tags and headers. 34 */ 35 'nonce_generator' => \App\Http\LaravelViteNonceGenerator::class, 36 ];