lunax/snipe_it
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity Actions

For #3998 - Disable CSP if debug=true

Browse source 
To avoid all the nonce hell from debugbar
This commit is contained in:
snipe 2017-09-29 04:53:09 -07:00
parent 05a8ba9a8e
commit efd71f8bfe
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/Http/Middleware/ContentSecurityPolicyHeader.php
View file

@ -14,7 +14,7 @@ class ContentSecurityPolicyHeader
*/ */
public function handle($request, Closure $next) public function handle($request, Closure $next)
{ {
if (config('app.disable_csp')=='true') { if ((config('app.debug')=='true') || (config('app.disable_csp')=='true')) {
$response = $next($request); $response = $next($request);
return $response; return $response;
} }