Adding scripts to the list of scripts that can be executed in `script…

…-src` Nelmio Security recommendations config
smartbooster · Apr 22, 2024 · 13ddbbb · 13ddbbb
1 parent 67a4db5
commit 13ddbbb
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 CHANGELOG for 1.x
 ===================
+## v1.2.3 - (2024-04-22)
+### Added
+- Adding scripts to the list of scripts that can be executed in `script-src` Nelmio Security recommendations config.
+
 ## v1.2.2 - (2024-04-02)
 ### Added
 - Add mapping comment on EntityTrait to be compatible with doctrine annotations type

diff --git a/README.md b/README.md
@@ -103,7 +103,13 @@ nelmio_security:
             script-src:
                 - 'self'
                 - 'unsafe-inline'
+                - 'unsafe-eval'
                 - 'https://maps.googleapis.com'
+                - 'https://use.fontawesome.com'
+                - 'https://www.google-analytics.com'
+                - 'https://www.youtube.com'
+                - 'https://www.youtube-nocookie.com'
+                - 'https://js.stripe.com'
             block-all-mixed-content: true # defaults to false, blocks HTTP content over HTTPS transport
 ```