From 6cbccf3be64f9439f000d348a62ea4a883b5f8da Mon Sep 17 00:00:00 2001 From: James Cole Date: Thu, 8 Apr 2021 11:50:59 +0200 Subject: [PATCH] Small change in headers --- app/Http/Middleware/SecureHeaders.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php index b26eb4900a..96a15655cd 100644 --- a/app/Http/Middleware/SecureHeaders.php +++ b/app/Http/Middleware/SecureHeaders.php @@ -54,7 +54,7 @@ class SecureHeaders "default-src 'none'", "object-src 'self'", sprintf("script-src 'unsafe-inline' 'nonce-%1s' %2s 'strict-dynamic'", $nonce, $trackingScriptSrc), - "style-src 'self'", + "style-src 'unsafe-inline' 'self'", "frame-ancestors 'none'", "base-uri 'self'", "font-src 'self' data:",