[TWIG] Added CSP in base template meta tag. This isn't optimal.

2021-11-16 23:47:25 +00:00 · 2021-11-16 23:47:25 +00:00 · e1b9ab4b9a
commit e1b9ab4b9a
parent f07dce4604
1 changed files with 2 additions and 0 deletions
--- a/templates/base.html.twig
+++ b/templates/base.html.twig
@ -2,6 +2,8 @@
 <html lang="en">
 <head>
    {% block meta %}
+        {# This is far from perfect. The response headers should already come with this. #}
+        {% if app.request.server.get('APP_ENV') not in ['test', 'dev'] %}<meta http-equiv="Content-Security-Policy" content="default-src https:">{% endif %}
        <meta charset="utf-8">
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <link rel="home" href="/">