From e9cee39673abd686f60c5d9eb54e5b175b223eb1 Mon Sep 17 00:00:00 2001 From: Pierre Rudloff Date: Tue, 20 Oct 2020 23:32:16 +0200 Subject: [PATCH] Allow manifest in CSP --- classes/Middleware/CspMiddleware.php | 1 + 1 file changed, 1 insertion(+) diff --git a/classes/Middleware/CspMiddleware.php b/classes/Middleware/CspMiddleware.php index d5f24f0..8e6ad73 100644 --- a/classes/Middleware/CspMiddleware.php +++ b/classes/Middleware/CspMiddleware.php @@ -41,6 +41,7 @@ class CspMiddleware ->addDirective('font-src', ['self' => true]) ->addDirective('style-src', ['self' => true]) ->addDirective('form-action', ['self' => true]) + ->addDirective('manifest-src', ['self' => true]) ->addDirective('base-uri', []) ->addDirective('frame-ancestors', []) ->addSource('img-src', '*');