Merge pull request snipe#8365 from snipe/fixes/8338_google_maps_CSP

Fixed snipe#8338 - Added google maps to CSP
Godmartinz · Aug 26, 2020 · 37568ae · 37568ae
2 parents 01a8321 + 32ad905
commit 37568ae
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Http/Middleware/SecurityHeaders.php b/app/Http/Middleware/SecurityHeaders.php
@@ -106,7 +106,7 @@ public function handle($request, Closure $next)
  $csp_policy[] = "connect-src 'self'";
  $csp_policy[] = "object-src 'none'";
  $csp_policy[] = "font-src 'self' data:";
- $csp_policy[] = "img-src 'self' data: gravatar.com";
+ $csp_policy[] = "img-src 'self' data: gravatar.com maps.google.com maps.gstatic.com *.googleapis.com";
  $csp_policy = join(';', $csp_policy);
  $response->headers->set('Content-Security-Policy', $csp_policy);
  }