search

BoldGrid / w3-total-cache

GNU General Public License v2.0
153 stars 86 forks source link

CSP > script-src-elem not fully updating in .htaccess #995

Open mangelot opened 2 weeks ago

mangelot commented 2 weeks ago

Noticed that script-src-elem isn't updating in .htaccess, when adding something to the field of style-src-attr it's placed in script-src-elem 

            $scriptelem      = trim( $this->c->get_string( 'browsercache.security.csp.scriptelem' ) );
            $scriptattr      = trim( $this->c->get_string( 'browsercache.security.csp.scriptattr' ) );
            $styleelem       = trim( $this->c->get_string( 'browsercache.security.csp.styleelem' ) );
            $scriptelem      = trim( $this->c->get_string( 'browsercache.security.csp.styleattr' ) );

should the last $scriptelem not be $styleattr inside BrowserCache_Environment.php and BrowserCache_Environment_Nginx.php