Allow plugins to override CSP rules

2015-10-10 18:59:06 -04:00
parent e3521db6a8
commit 0e233673e3
4 changed files with 34 additions and 2 deletions
--- a/app/Controller/Base.php
+++ b/app/Controller/Base.php
@@ -80,7 +80,7 @@ abstract class Base extends \Core\Base
    private function sendHeaders($action)
    {
        // HTTP secure headers
-        $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => '* data:'));
+        $this->response->csp($this->container['cspRules']);
        $this->response->nosniff();
        $this->response->xss();