icy headers in your application. Before using it you should install paragonie/csp-builder: composer require paragonie/csp-builder You can then configure the middleware using an array, or passing in a a built CSPBuilder object: use Cake\Http\Middleware\CspMiddleware; $csp = new CspMiddleware([ 'script-src' => [ 'allow' => [ 'https://www.google-analytics.com', ], $middlewareQueue->add($csp); If you want to use a more strict CSP configuration, you can enable nonce based CSP rules with the scriptNonce and styleNonce options. When enabled these options will modify your CSP policy

icy headers in your application. Before using it you should install paragonie/csp-builder: composer require paragonie/csp-builder You can then configure the middleware using an array, or passing in a a built CSPBuilder object: use Cake\Http\Middleware\CspMiddleware; $csp = new CspMiddleware([ 'script-src' => [ (continues on next page) 660 Chapter 27. Security CakePHP Cookbook Documentation, Release $middlewareQueue->add($csp); If you want to use a more strict CSP configuration, you can enable nonce based CSP rules with the scriptNonce and styleNonce options. When enabled these options will modify your CSP policy

icy headers in your application. Before using it you should install paragonie/csp-builder: composer require paragonie/csp-builder You can then configure the middleware using an array, or passing in a a built CSPBuilder object: use Cake\Http\Middleware\CspMiddleware; $csp = new CspMiddleware([ 'script-src' => [ 'allow' => [ 'https://www.google-analytics.com', ], $middlewareQueue->add($csp); If you want to use a more strict CSP configuration, you can enable nonce based CSP rules with the scriptNonce and styleNonce options. When enabled these options will modify your CSP policy

icy headers in your application. Before using it you should install paragonie/csp-builder: composer require paragonie/csp-builder You can then configure the middleware using an array, or passing in a a built CSPBuilder object: use Cake\Http\Middleware\CspMiddleware; $csp = new CspMiddleware([ 'script-src' => [ (continues on next page) 762 Chapter 26. Security CakePHP Cookbook Documentation, Release $middlewareQueue->add($csp); If you want to use a more strict CSP configuration, you can enable nonce based CSP rules with the scriptNonce and styleNonce options. When enabled these options will modify your CSP policy

should install paragonie/csp-builder: You can then configure the middleware using an array, or passing in a built CSPBuilder object: use Cake\Http\Middleware\CspMiddleware; $csp = new CspMiddleware([ 'unsafe-inline' => false, 'unsafe-eval' => false, ], ]); $middlewareQueue->add($csp); New in version 3.9.0: CspMiddleware was added. Security Header Middleware The SecurityHeaderMiddleware