Fix CSP nonce timing for admin styles

2026-01-24 20:54:23 +01:00
parent 3255917201
commit b17dd655db
3 changed files with 11 additions and 9 deletions
--- a/app/Http/Middleware/ContentSecurityPolicy.php
+++ b/app/Http/Middleware/ContentSecurityPolicy.php
@@ -123,6 +123,7 @@ class ContentSecurityPolicy
            'default-src' => ["'self'"],
            'script-src' => array_unique($scriptSources),
            'style-src' => array_unique($styleSources),
+            'style-src-attr' => ["'unsafe-inline'"],
            'img-src' => array_unique($imgSources),
            'font-src' => array_unique($fontSources),
            'connect-src' => array_unique($connectSources),