From 0e347625e3869944a3b778b7459085f325404717 Mon Sep 17 00:00:00 2001 From: the-djmaze <> Date: Sun, 6 Nov 2022 23:12:01 +0100 Subject: [PATCH] Make CSP entries unique --- .../v/0.0.0/app/libraries/snappymail/http/csp.php | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/snappymail/v/0.0.0/app/libraries/snappymail/http/csp.php b/snappymail/v/0.0.0/app/libraries/snappymail/http/csp.php index 85fd5c23f..aa44a2ca7 100644 --- a/snappymail/v/0.0.0/app/libraries/snappymail/http/csp.php +++ b/snappymail/v/0.0.0/app/libraries/snappymail/http/csp.php @@ -35,20 +35,20 @@ class CSP function __toString() : string { $params = [ - 'base-uri ' . \implode(' ', $this->base), - 'default-src ' . \implode(' ', $this->default) + 'base-uri ' . \implode(' ', \array_unique($this->base)), + 'default-src ' . \implode(' ', \array_unique($this->default)) ]; if ($this->script) { - $params[] = 'script-src ' . \implode(' ', $this->script); + $params[] = 'script-src ' . \implode(' ', \array_unique($this->script)); } if ($this->img) { - $params[] = 'img-src ' . \implode(' ', $this->img); + $params[] = 'img-src ' . \implode(' ', \array_unique($this->img)); } if ($this->style) { - $params[] = 'style-src ' . \implode(' ', $this->style); + $params[] = 'style-src ' . \implode(' ', \array_unique($this->style)); } if ($this->frame) { - $params[] = 'frame-src ' . \implode(' ', $this->frame); + $params[] = 'frame-src ' . \implode(' ', \array_unique($this->frame)); } // Deprecated