jonny/jonnybarnes.uk
1
0
Fork 0
Code Issues 5 Pull requests Projects Releases 5 Packages Wiki Activity Actions

Shorten some lines to less than 120 chars

Browse source
This commit is contained in:
Jonny Barnes 2018-03-02 17:47:20 +00:00
parent f5b69244df
commit 8cbbc821bf
2 changed files with 41 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

42
app/Http/Middleware/CSPHeader.php
View file

@ -21,11 +21,43 @@ class CSPHeader
->header(
'Content-Security-Policy',
"default-src 'self'; " .
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.mapbox.com https://analytics.jmb.lv blob:; " .
"style-src 'self' 'unsafe-inline' https://api.mapbox.com https://fonts.googleapis.com use.typekit.net p.typekit.net; " .
"img-src 'self' data: blob: https://pbs.twimg.com https://api.mapbox.com https://*.tiles.mapbox.com https://jbuk-media.s3-eu-west-1.amazonaws.com https://secure.gravatar.com https://graph.facebook.com *.fbcdn.net https://*.cdninstagram.com analytics.jmb.lv https://*.4sqi.net https://upload.wikimedia.org p.typekit.net; " .
"font-src 'self' https://fonts.gstatic.com use.typekit.net fonts.typekit.net; " .
"connect-src 'self' https://api.mapbox.com https://*.tiles.mapbox.com performance.typekit.net data: blob:; " .
"script-src 'self' \
'unsafe-inline' \
'unsafe-eval' \
https://api.mapbox.com \
https://analytics.jmb.lv \
blob:; " .
"style-src 'self' \
'unsafe-inline' \
https://api.mapbox.com \
https://fonts.googleapis.com \
use.typekit.net \
p.typekit.net; " .
"img-src 'self' \
data: \
blob: \
https://pbs.twimg.com \
https://api.mapbox.com \
https://*.tiles.mapbox.com \
https://jbuk-media.s3-eu-west-1.amazonaws.com \
https://secure.gravatar.com \
https://graph.facebook.com \
*.fbcdn.net \
https://*.cdninstagram.com \
analytics.jmb.lv \
https://*.4sqi.net \
https://upload.wikimedia.org \
p.typekit.net; " .
"font-src 'self' \
https://fonts.gstatic.com \
use.typekit.net \
fonts.typekit.net; " .
"connect-src 'self' \
https://api.mapbox.com \
https://*.tiles.mapbox.com \
performance.typekit.net \
data: \
blob:; " .
"worker-src 'self' blob:; " .
"frame-src 'self' https://www.youtube.com blob:; " .
"child-src 'self' blob:; " .

5
app/Http/Middleware/CorsHeaders.php
View file

@ -19,7 +19,10 @@ class CorsHeaders
if ($request->path() === 'api/media') {
$response->header('Access-Control-Allow-Origin', '*');
$response->header('Access-Control-Allow-Methods', 'OPTIONS, POST');
$response->header('Access-Control-Allow-Headers', 'Authorization, Content-Type, DNT, X-CSRF-TOKEN, X-REQUESTED-WITH');
$response->header(
'Access-Control-Allow-Headers',
'Authorization, Content-Type, DNT, X-CSRF-TOKEN, X-REQUESTED-WITH'
);
$response->header('Access-Control-Allow-Credentials', 'true');
}