namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
class ContentSecurityPolicy
{
public function handle(Request $request, Closure $next)
{
$response = $next($request);
$csp = "default-src 'self'; script-src 'self'; style-src 'self'; object-src 'none';";
$response->headers->set('Content-Security-Policy', $csp);
return $response;
}
}
Server Error
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
class ContentSecurityPolicy
{
public function handle(Request $request, Closure $next)
{
$response = $next($request);
$csp = "default-src 'self'; script-src 'self'; style-src 'self'; object-src 'none';";
$response->headers->set('Content-Security-Policy', $csp);
return $response;
}
}
Server Error