mirror of https://github.com/kcal-app/kcal.git
35 lines
1.0 KiB
PHP
35 lines
1.0 KiB
PHP
<?php
|
|
|
|
return [
|
|
|
|
/*
|
|
* A policy will determine which CSP headers will be set. A valid CSP policy is
|
|
* any class that extends `Spatie\Csp\Policies\Policy`
|
|
*/
|
|
'policy' => App\Services\Csp\Policies\DefaultPolicy::class,
|
|
|
|
/*
|
|
* This policy which will be put in report only mode. This is great for testing out
|
|
* a new policy or changes to existing csp policy without breaking anything.
|
|
*/
|
|
'report_only_policy' => '',
|
|
|
|
/*
|
|
* All violations against the policy will be reported to this url.
|
|
* A great service you could use for this is https://report-uri.com/
|
|
*
|
|
* You can override this setting by calling `reportTo` on your policy.
|
|
*/
|
|
'report_uri' => env('CSP_REPORT_URI', ''),
|
|
|
|
/*
|
|
* Headers will only be added if this setting is set to true.
|
|
*/
|
|
'enabled' => env('CSP_ENABLED', true),
|
|
|
|
/*
|
|
* The class responsible for generating the nonces used in inline tags and headers.
|
|
*/
|
|
'nonce_generator' => Spatie\Csp\Nonce\RandomString::class,
|
|
];
|