Mantis Bug Tracker - Forums

I'm working on adding reCaptcha and hCaptcha to the core files on a pull request giving admins the choice on which Captcha to use. Anyway, I'm trying to find where CSP is handled so I can add the sites for google and hCaptcha to the headers.

I can do it by a plugin for the time being but would rather edit core files since I plan to submit this to MantisBT team for inclusion in the next release version.

If you would scan the core directory on files that contain "CSP" you would have found the http_api.php

I looked in that file and found nothing related to CSP.

Perhaps you should look @ function http_security_headers() and function http_custom_headers()

Ok that was my fault, I thought I had http_api.php opened but I had html_api.php so oops.