wip

Author: Sebastian Fix

app/Http/Middleware/AddContentSecurityPolicyHeaders.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class AddReferrerPolicyMiddleware
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        /** @var \Symfony\Component\HttpFoundation\Response $response */
+        $response = $next($request);
+
+        $response->headers->set('Referrer-Policy', 'strict-origin-when-cross-origin');
+
+        return $response;
+    }
+}

app/Http/Middleware/AddReferrerPolicyMiddleware.php

@@ -1,6 +1,6 @@
 <?php
 
-use App\Http\Middleware\AddContentSecurityPolicyHeaders;
+use App\Http\Middleware\AddReferrerPolicyMiddleware;
 use App\Http\Middleware\SetLanguage;
 use App\Providers\AppServiceProvider;
 use App\Providers\EventServiceProvider;
@@ -25,7 +25,7 @@
     ->withMiddleware(function (Middleware $middleware) {
         $middleware->web(append: [
             AddCspHeaders::class,
-            // AddContentSecurityPolicyHeaders::class,
+            //	AddReferrerPolicyMiddleware::class,
             AddFeaturePolicyHeaders::class,
             SetLanguage::class,
             CacheResponse::class,