Enable CSP also in debug mode, as otherwise it complains about missing nonce function

This commit is contained in:
Jan Böhmer 2025-09-06 23:29:19 +02:00
parent 90f83273da
commit 2b28aa8ba9

View file

@ -69,9 +69,3 @@ nelmio_security:
- 'data:' - 'data:'
block-all-mixed-content: true # defaults to false, blocks HTTP content over HTTPS transport block-all-mixed-content: true # defaults to false, blocks HTTP content over HTTPS transport
# upgrade-insecure-requests: true # defaults to false, upgrades HTTP requests to HTTPS transport # upgrade-insecure-requests: true # defaults to false, upgrades HTTP requests to HTTPS transport
when@dev:
# disables the Content-Security-Policy header
nelmio_security:
csp:
enabled: false