Allow manifest in CSP

Vawell · Oct 20, 2020 · e9cee39 · e9cee39
1 parent 0a220d4
commit e9cee39
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/classes/Middleware/CspMiddleware.php b/classes/Middleware/CspMiddleware.php
@@ -41,6 +41,7 @@ public function applyHeader(Response $response)
             ->addDirective('font-src', ['self' => true])
             ->addDirective('style-src', ['self' => true])
             ->addDirective('form-action', ['self' => true])
+            ->addDirective('manifest-src', ['self' => true])
             ->addDirective('base-uri', [])
             ->addDirective('frame-ancestors', [])
             ->addSource('img-src', '*');