Disable content security policy in development env, as symfony profiler uses a lot of inline js

This commit is contained in:
Jan Böhmer 2022-08-28 18:40:16 +02:00
parent 4ba58cc621
commit 99b25fb293

View file

@ -58,3 +58,9 @@ nelmio_security:
- 'data:' - 'data:'
block-all-mixed-content: true # defaults to false, blocks HTTP content over HTTPS transport block-all-mixed-content: true # defaults to false, blocks HTTP content over HTTPS transport
# upgrade-insecure-requests: true # defaults to false, upgrades HTTP requests to HTTPS transport # upgrade-insecure-requests: true # defaults to false, upgrades HTTP requests to HTTPS transport
when@dev:
# disables the Content-Security-Policy header
nelmio_security:
csp:
enabled: false