|
1 | 1 | <?php |
2 | 2 |
|
3 | | -return [ |
| 3 | +declare(strict_types=1); |
4 | 4 |
|
5 | | - 'enable' => true, |
| 5 | +return [ |
| 6 | + 'enable' => env('SECURITY_HEADERS_ENABLE', false), |
6 | 7 | /* |
7 | 8 | * Server |
8 | 9 | * |
|
81 | 82 | */ |
82 | 83 |
|
83 | 84 | 'clear-site-data' => [ |
84 | | - 'enable' => false, |
| 85 | + 'enable' => true, |
85 | 86 |
|
86 | | - 'all' => false, |
| 87 | + 'all' => true, |
87 | 88 |
|
88 | 89 | 'cache' => true, |
89 | 90 |
|
|
103 | 104 | */ |
104 | 105 |
|
105 | 106 | 'hsts' => [ |
106 | | - 'enable' => false, |
| 107 | + 'enable' => true, |
107 | 108 |
|
108 | 109 | 'max-age' => 15552000, |
109 | 110 |
|
110 | | - 'include-sub-domains' => false, |
| 111 | + 'include-sub-domains' => true, |
111 | 112 |
|
112 | 113 | 'preload' => true, |
113 | 114 | ], |
|
492 | 493 |
|
493 | 494 | 'style-src' => [ |
494 | 495 | 'allow' => [ |
495 | | - "*", |
| 496 | + '*', |
496 | 497 | ], |
497 | 498 |
|
498 | 499 | 'hashes' => [ |
|
502 | 503 | ], |
503 | 504 |
|
504 | 505 | 'nonces' => [ |
505 | | - // |
506 | 506 | ], |
507 | 507 |
|
508 | 508 | 'schemes' => [ |
|
516 | 516 | ], |
517 | 517 |
|
518 | 518 | 'img-src' => [ |
519 | | - 'schemes' => ['*', "self", 'http:', 'https:', 'blob:', 'data:'], |
| 519 | + 'schemes' => ['*', 'self', 'http:', 'https:', 'blob:', 'data:'], |
520 | 520 | ], |
521 | 521 | 'default-src' => [ |
522 | | - // |
523 | 522 | ], |
524 | 523 |
|
525 | 524 | 'base-uri' => [ |
526 | | - // |
527 | 525 | ], |
528 | 526 |
|
529 | 527 | 'connect-src' => [ |
530 | | - 'schemes' => ['*', "self", 'http:', 'https:', 'blob:', 'data:'], |
| 528 | + 'schemes' => ['*', 'self', 'http:', 'https:', 'blob:', 'data:'], |
531 | 529 | ], |
532 | 530 |
|
533 | 531 | 'font-src' => [ |
534 | | - 'schemes' => ['*', "self", 'http:', 'https:', 'blob:', 'data:'], |
| 532 | + 'schemes' => ['*', 'self', 'http:', 'https:', 'blob:', 'data:'], |
535 | 533 | ], |
536 | 534 |
|
537 | 535 | 'form-action' => [ |
538 | | - 'schemes' => ['*', "self", 'http:', 'https:', 'blob:', 'data:'], |
| 536 | + 'schemes' => ['*', 'self', 'http:', 'https:', 'blob:', 'data:'], |
539 | 537 | ], |
540 | 538 |
|
541 | 539 | 'frame-ancestors' => [ |
542 | | - 'schemes' => ['*', "self", 'http:', 'https:', 'blob:', 'data:'], |
| 540 | + 'schemes' => ['*', 'self', 'http:', 'https:', 'blob:', 'data:'], |
543 | 541 | ], |
544 | 542 |
|
545 | 543 | 'frame-src' => [ |
546 | | - 'schemes' => ['*', "self", 'http:', 'https:', 'blob:', 'data:'], |
| 544 | + 'schemes' => ['*', 'self', 'http:', 'https:', 'blob:', 'data:'], |
547 | 545 | ], |
548 | 546 |
|
549 | 547 | 'manifest-src' => [ |
550 | | - 'schemes' => ['*', "self", 'http:', 'https:', 'blob:', 'data:'], |
| 548 | + 'schemes' => ['*', 'self', 'http:', 'https:', 'blob:', 'data:'], |
551 | 549 | ], |
552 | 550 |
|
553 | 551 | 'media-src' => [ |
554 | | - 'schemes' => ['*', "self", 'http:', 'https:', 'blob:', 'data:'], |
| 552 | + 'schemes' => ['*', 'self', 'http:', 'https:', 'blob:', 'data:'], |
555 | 553 | ], |
556 | 554 |
|
557 | 555 | 'object-src' => [ |
558 | | - // |
559 | 556 | ], |
560 | 557 |
|
561 | 558 | 'worker-src' => [ |
562 | | - 'schemes' => ['*', "self", 'http:', 'https:', 'blob:'], |
| 559 | + 'schemes' => ['*', 'self', 'http:', 'https:', 'blob:'], |
563 | 560 | ], |
564 | 561 |
|
565 | 562 | 'plugin-types' => [ |
|
569 | 566 | 'require-sri-for' => '', |
570 | 567 |
|
571 | 568 | 'sandbox' => '', |
572 | | - |
573 | 569 | ], |
574 | | - |
575 | 570 | ]; |
0 commit comments