lindeas
/
jilo-web
1
1
Fork 0
Code Issues Pull Requests Packages Projects Releases 5 Wiki Activity

Bugfixes

main
Yasen Pramatarov 2025-02-17 18:51:39 +02:00
parent 363fbf2a6b
commit 2da13af04c
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/helpers/security.php
View File

@ -17,7 +17,7 @@ class SecurityHelper {
public static function getInstance() { public static function getInstance() {
if (self::$instance === null) { if (self::$instance === null) {
self::$instance = new Security(); self::$instance = new SecurityHelper();
} }
return self::$instance; return self::$instance;
} }

4
app/includes/security_headers_middleware.php
View File

@ -32,9 +32,9 @@ if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on') {
$csp = [ $csp = [
"default-src 'self'", "default-src 'self'",
"script-src 'self' 'unsafe-inline' 'unsafe-eval'", // Required for Bootstrap and jQuery "script-src 'self' 'unsafe-inline' 'unsafe-eval'", // Required for Bootstrap and jQuery
"style-src 'self' 'unsafe-inline'", // Required for Bootstrap "style-src 'self' 'unsafe-inline' https://use.fontawesome.com", // Allow FontAwesome CSS
"img-src 'self' data:", // Allow data: URLs for images "img-src 'self' data:", // Allow data: URLs for images
"font-src 'self'", "font-src 'self' https://use.fontawesome.com", // Allow FontAwesome fonts
"connect-src 'self'", "connect-src 'self'",
"frame-ancestors 'none'", // Equivalent to X-Frame-Options: DENY "frame-ancestors 'none'", // Equivalent to X-Frame-Options: DENY
"form-action 'self'", "form-action 'self'",