Adjust content security policy

portal/login_reset.php

@@ -4,6 +4,8 @@
  * Password reset page
  */
 
+header("Content-Security-Policy: default-src 'self' fonts.googleapis.com fonts.gstatic.com");
+
 $session_company_id = 1;
 require_once('../config.php');
 require_once('../functions.php');
@@ -274,19 +276,15 @@ if ($_SERVER['REQUEST_METHOD'] == "POST") {
 
 <!-- jQuery -->
 <script src="../plugins/jquery/jquery.min.js"></script>
+
 <!-- Bootstrap 4 -->
 <script src="../plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
+
 <!-- AdminLTE App -->
 <script src="../dist/js/adminlte.min.js"></script>
 
-<script src="../plugins/Show-Hide-Passwords-Bootstrap-4/bootstrap-show-password.min.js"></script>
-
 <!-- Prevents resubmit on refresh or back -->
-<script>
-    if (window.history.replaceState) {
-        window.history.replaceState(null,null,window.location.href);
-    }
-</script>
+<script src="../js/login_prevent_resubmit.js"></script>
 
 </body>
 </html>