- Add CSP headers in guest.blade.php for enhanced security.

- Update Vite config with proper server settings, including CORS configuration for `ddev.site` domains.
- Upgrade dependencies in `package-lock.json`, including versions for Rollup and TailwindCSS packages.
This commit is contained in:
2026-01-21 04:25:01 +01:00
parent c7671b93b1
commit af0cf8bed9
6 changed files with 479 additions and 459 deletions
@@ -20,7 +20,7 @@
@livewireStyles
@fluxAppearance
<title>{{ $title . ' | ' . config('app.name') ?? config('app.name') }}</title>
<title>{{ config('app.name', 'Laravel') }}</title>
</head>
<body class="font-sans antialiased bg-neutral-900">
<x-navbar />
@@ -36,6 +36,5 @@
@fluxScripts
@stack('modals')
</body>
</html>
+10
View File
@@ -4,6 +4,16 @@
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="csrf-token" content="{{ csrf_token() }}">
<meta http-equiv="Content-Security-Policy"
content="
default-src 'self';
script-src 'self' 'unsafe-inline' http://localhost:5173 http://127.0.0.1:5173;
script-src-elem 'self' http://localhost:5173 http://127.0.0.1:5173;
style-src 'self' 'unsafe-inline' http://localhost:5173 http://127.0.0.1:5173 https://fonts.bunny.net;
style-src-elem 'self' http://localhost:5173 http://127.0.0.1:5173 https://fonts.bunny.net;
font-src 'self' https://fonts.bunny.net;
connect-src 'self' ws://localhost:5173 ws://127.0.0.1:5173 http://localhost:5173 http://127.0.0.1:5173;
">
<title>{{ config('app.name', 'Laravel') }}</title>