correctly set strict-dynamic

joomla · Apr 30, 2020 · 615f800 · 615f800
1 parent 7b3efc2
commit 615f800
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/plugins/system/httpheaders/httpheaders.php b/plugins/system/httpheaders/httpheaders.php
@@ -327,7 +327,7 @@ private function setCspHeader(): void
 					&& strpos($cspValue->value, 'strict-dynamic') === 0
 					&& $scriptDynamicEnabled)
 				{
-					$cspValue->value = $cspValue->value . ' strict-dynamic';
+					$cspValue->value = $cspValue->value . " 'strict-dynamic' ";
 				}
 
 				$newCspValues[] = trim($cspValue->directive) . ' ' . trim($cspValue->value);
@@ -458,7 +458,7 @@ private function compileAutomaticCspHeaderRules(): array
 				&& strpos($cspHeaderValue, 'strict-dynamic') === 0
 				&& $scriptDynamicEnabled)
 			{
-				$cspHeaderValue = $cspHeaderValue . ' strict-dynamic';
+				$cspHeaderValue = $cspHeaderValue . " 'strict-dynamic' ";
 			}
 
 			// By default we should whitelist 'self' on any directive