core/php
8
0
Fork 0
Code Issues 7 Pull requests Projects Releases Packages Wiki Activity Actions

fix: remove host_analytics from framework CSP config
Some checks failed
CI / PHP 8.3 (push) Failing after 1m53s
Details
CI / PHP 8.4 (push) Failing after 1m49s
Details

Browse source 
Website-specific CSP sources belong in app config, not framework.

Co-Authored-By: Virgil <virgil@lethean.io>
This commit is contained in:
Snider 2026-03-10 05:28:01 +00:00
parent 95cd788bc9
commit 87ae36ef22
1 changed files with 0 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
src/Core/Headers/config.php
View file

@ -214,13 +214,6 @@ return [
'script-src' => ['https://connect.facebook.net'],
'frame-src' => ['https://www.facebook.com'],
],
'host_analytics' => [
'enabled' => env('SECURITY_CSP_HOST_ANALYTICS', false),
'script-src' => ['https://analytics.host.uk.com'],
'connect-src' => ['https://analytics.host.uk.com'],
'img-src' => ['https://analytics.host.uk.com'],
],
],
],