I'm working on adding reCaptcha and hCaptcha to the core files on a pull request giving admins the choice on which Captcha to use. Anyway, I'm trying to find where CSP is handled so I can add the sites for google and hCaptcha to the headers.
I can do it by a plugin for the time being but would rather edit core files since I plan to submit this to MantisBT team for inclusion in the next release version.
CSP headers
Moderators: Developer, Contributor
Re: CSP headers
If you would scan the core directory on files that contain "CSP" you would have found the http_api.php
-
- Posts: 21
- Joined: 24 Aug 2020, 21:47
- Contact:
Re: CSP headers
I looked in that file and found nothing related to CSP.
Re: CSP headers
Perhaps you should look @ function http_security_headers() and function http_custom_headers()
-
- Posts: 21
- Joined: 24 Aug 2020, 21:47
- Contact:
Re: CSP headers
Ok that was my fault, I thought I had http_api.php opened but I had html_api.php so oops.