Merge pull request #8365 from snipe/fixes/8338_google_maps_CSP

Fixed #8338 - Added google maps to CSP
This commit is contained in:
snipe 2020-08-25 20:49:37 -07:00 committed by GitHub
commit 37568ae9ec
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -106,7 +106,7 @@ class SecurityHeaders
$csp_policy[] = "connect-src 'self'"; $csp_policy[] = "connect-src 'self'";
$csp_policy[] = "object-src 'none'"; $csp_policy[] = "object-src 'none'";
$csp_policy[] = "font-src 'self' data:"; $csp_policy[] = "font-src 'self' data:";
$csp_policy[] = "img-src 'self' data: gravatar.com"; $csp_policy[] = "img-src 'self' data: gravatar.com maps.google.com maps.gstatic.com *.googleapis.com";
$csp_policy = join(';', $csp_policy); $csp_policy = join(';', $csp_policy);
$response->headers->set('Content-Security-Policy', $csp_policy); $response->headers->set('Content-Security-Policy', $csp_policy);
} }