Remove 'strict-dynamic'

2025-11-03 20:55:05 +00:00 · 2024-03-10 16:49:16 +01:00
parent e91903fed2
commit 3b005c317d
1 changed files with 1 additions and 1 deletions
--- a/app/Http/Middleware/SecureHeaders.php
+++ b/app/Http/Middleware/SecureHeaders.php
@@ -55,7 +55,7 @@ class SecureHeaders
            "base-uri 'self'",
            "font-src 'self' data:",
            sprintf("connect-src 'self' %s", $trackingScriptSrc),
-            sprintf("img-src 'self' 'strict-dynamic' 'nonce-%1s'", $nonce),
+            sprintf("img-src 'self' 'nonce-%1s'", $nonce),
            "manifest-src 'self'",
        ];