Changeset 3998:48e5fe3e4c22 for inc/dbschema/upgrade.php

Timestamp:

06/30/19 16:10:13 (6 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Remove unsafe-inline from CSP script-src directive (install/default/upgrade)

File:

• inc/dbschema/upgrade.php (modified) (1 diff)

inc/dbschema/upgrade.php

@@ -671 +671 @@
                 @unlink(DC_ROOT . '/' . $f);
             }
+
+            // Remove unsafe-inline from CSP script directives
+            $strReq = 'UPDATE ' . $core->prefix . 'setting ' .
+                " SET setting_value = REPLACE(setting_value, \"'unsafe-inline'\", '') " .
+                " WHERE setting_id = 'csp_admin_script' " .
+                " AND setting_ns = 'system' ";
+            $core->con->execute($strReq);
         }