kenmirrors/firefly-iii
1
0
Fork 0
mirror of https://github.com/firefly-iii/firefly-iii.git synced 2025-11-20 00:20:03 +00:00
Code Issues Projects Releases Wiki Activity

Merge tag '4.7.17.3' into develop

Browse Source 
4.7.17.3

# Conflicts:
#	changelog.md
#	config/firefly.php
This commit is contained in:
James Cole
2019-07-16 19:24:07 +02:00
parent 2772a1bb3b 7d482aa24c
commit a42992efb0
8 changed files with 42 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/Http/Middleware/SecureHeaders.php
View File

@@ -87,7 +87,11 @@ class SecureHeaders
if (false === $disableFrameHeader || null === $disableFrameHeader) {
$response->header('X-Frame-Options', 'deny');
}
$response->header('Content-Security-Policy', implode('; ', $csp));
// content security policy may be set elsewhere.
if (!$response->headers->has('Content-Security-Policy')) {
$response->header('Content-Security-Policy', implode('; ', $csp));
}
$response->header('X-XSS-Protection', '1; mode=block');
$response->header('X-Content-Type-Options', 'nosniff');
$response->header('Referrer-Policy', 'no-referrer');