For #3998 - Disable CSP if debug=true

To avoid all the nonce hell from debugbar
This commit is contained in:
snipe 2017-09-29 04:53:09 -07:00
parent 05a8ba9a8e
commit efd71f8bfe

View file

@ -14,7 +14,7 @@ class ContentSecurityPolicyHeader
*/
public function handle($request, Closure $next)
{
if (config('app.disable_csp')=='true') {
if ((config('app.debug')=='true') || (config('app.disable_csp')=='true')) {
$response = $next($request);
return $response;
}