- Add CSP headers in guest.blade.php for enhanced security.
- Update Vite config with proper server settings, including CORS configuration for `ddev.site` domains. - Upgrade dependencies in `package-lock.json`, including versions for Rollup and TailwindCSS packages.
This commit is contained in:
@@ -4,6 +4,16 @@
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<meta name="csrf-token" content="{{ csrf_token() }}">
|
||||
<meta http-equiv="Content-Security-Policy"
|
||||
content="
|
||||
default-src 'self';
|
||||
script-src 'self' 'unsafe-inline' http://localhost:5173 http://127.0.0.1:5173;
|
||||
script-src-elem 'self' http://localhost:5173 http://127.0.0.1:5173;
|
||||
style-src 'self' 'unsafe-inline' http://localhost:5173 http://127.0.0.1:5173 https://fonts.bunny.net;
|
||||
style-src-elem 'self' http://localhost:5173 http://127.0.0.1:5173 https://fonts.bunny.net;
|
||||
font-src 'self' https://fonts.bunny.net;
|
||||
connect-src 'self' ws://localhost:5173 ws://127.0.0.1:5173 http://localhost:5173 http://127.0.0.1:5173;
|
||||
">
|
||||
|
||||
<title>{{ config('app.name', 'Laravel') }}</title>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user