CSP - Client Portal Test

Add initial content security policy trial/test to some client portal pages
2023-04-29 19:39:42 +01:00
parent ca0024feb9
commit 0340b080ad
6 changed files with 12 additions and 2 deletions
--- a/portal/invoices.php
+++ b/portal/invoices.php
@@ -4,6 +4,8 @@
 * Invoices for PTC
 */

+header("Content-Security-Policy: default-src 'self' https: fonts.googleapis.com");
+
 require_once("inc_portal.php");

 if ($session_contact_id !== $session_client_primary_contact_id && !$session_contact_is_billing_contact) {