Flowpack.ContentSecurityPolicy/Configuration/Settings.yaml at a72805a40d66d1bdaa4859f090cf86ea61679982 · Flowpack/Flowpack.ContentSecurityPolicy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
Flowpack:
  ContentSecurityPolicy:
    enabled: true
    report-only: false
    throw-exception-on-configuration-error: true
    content-security-policy:
      default:
        base-uri:
         'self': true
        connect-src:
          'self': true
        default-src:
          'self': true
        form-action:
          'self': true
        img-src:
          'self': true
        media-src:
          'self': true
        frame-src:
          'self': true
        object-src:
          'self': true
        script-src:
          'self': true
        style-src:
          'self': true
        style-src-attr:
          'self': true
        style-src-elem:
          'self': true
        font-src:
          'self': true
      custom: [ ]
      backend:
        base-uri:
          'self': true
        connect-src:
          'self': true
        default-src:
          'self': true
        form-action:
          'self': true
        img-src:
          'self': true
          'data:': true
        media-src:
          'self': true
        frame-src:
          'self': true
        object-src:
          'self': true
        script-src:
          'self': true
          'unsafe-inline': true
          'unsafe-eval': true
        style-src:
          'self': true
          'unsafe-inline': true
        style-src-attr:
          'self': true
          'unsafe-inline': true
        style-src-elem:
          'self': true
          'unsafe-inline': true
        font-src:
          'self': true
          'data:': true
      custom-backend: [ ]
    policies:
      backend:
        matchUris:
          - '^/neos'
      custom-backend:
        matchUris: []

Neos:
  Neos:
    fusion:
      autoInclude:
        Flowpack.ContentSecurityPolicy: true
  Flow:
    http:
      middlewares:
        'cspHeader':
          position: 'after routing'
          middleware: 'Flowpack\ContentSecurityPolicy\Http\CspHeaderMiddleware'