Merge pull request #5734 from kenjis/fix-csp

refactor: remove unneeded `&` references in ContentSecurityPolicy.php

Author: kenjis

system/HTTP/ContentSecurityPolicy.php

@@ -298,7 +298,7 @@ public function getScriptNonce(): string
      *
      * Should be called just prior to sending the response to the user agent.
      */
-    public function finalize(ResponseInterface &$response)
+    public function finalize(ResponseInterface $response)
     {
         if ($this->autoNonce === false) {
             return;
@@ -663,7 +663,7 @@ protected function addOption($options, string $target, ?bool $explicitReporting
      * placeholders with actual nonces, that we'll then add to our
      * headers.
      */
-    protected function generateNonces(ResponseInterface &$response)
+    protected function generateNonces(ResponseInterface $response)
     {
         $body = $response->getBody();
 
@@ -695,7 +695,7 @@ protected function generateNonces(ResponseInterface &$response)
      * Content-Security-Policy and Content-Security-Policy-Report-Only headers
      * with their values to the response object.
      */
-    protected function buildHeaders(ResponseInterface &$response)
+    protected function buildHeaders(ResponseInterface $response)
     {
         /**
          * Ensure both headers are available and arrays...