search

monody-game / monody

Monody's website and api
https://monody.fr
1 stars 0 forks source link

MON-61: Assets security policy #61

Closed moon250 closed 1 year ago

moon250 commented 1 year ago

https://laravel.com/docs/9.x/vite#script-and-style-attributes https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/nonce

moon250 commented 1 year ago

Done in cfe720f , did not added CSP because it was not working (nonce attributes empty and CSP header not set, maybe because of nginx?)