Content Security Policy fix for current Laravel 8 project
Budget: €250 – €750 EUR
We have build a fairly big Laravel project by now and are trying to run "Laravel Enlightn" to validate security. Check 64/64 is about Content Security Policy but this fails.
We are looking for an expert to implement this the right way into our existing application.
Also any security recommendations are welcome. We would like advise on that.
Check 64/64: Your application sets appropriate HTTP headers to protect against XSS attacks. Failed
Your application is not adequately protected from XSS attacks. The Content-Security-Policy is either not set or not set adequately for XSS. It is recommended to set a "script-src" or "default-src" policy directive without "unsafe-eval" or "unsafe-inline".
Documentation URL: https://www.laravel-enlightn.com/docs/security/xss-analyzer.html
We are looking for an expert to implement this the right way into our existing application.
Also any security recommendations are welcome. We would like advise on that.
Check 64/64: Your application sets appropriate HTTP headers to protect against XSS attacks. Failed
Your application is not adequately protected from XSS attacks. The Content-Security-Policy is either not set or not set adequately for XSS. It is recommended to set a "script-src" or "default-src" policy directive without "unsafe-eval" or "unsafe-inline".
Documentation URL: https://www.laravel-enlightn.com/docs/security/xss-analyzer.html