Merge pull request #6 from moreonion/csp

feat: Declare CSP header requirements
moreonion · Nov 25, 2024 · c00ead2 · c00ead2
2 parents edf8b7e + 6ed2613
commit c00ead2
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 2 deletions.
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -6,10 +6,10 @@ on:
 
 jobs:
   phpunit:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     strategy:
       matrix:
-        php-versions: ["7.3", "7.4"]
+        php-versions: ["7.4"]
     name: phpunit on PHP ${{ matrix.php-versions }}
     env:
       DB_DATABASE: drupal

diff --git a/payone_payment.module b/payone_payment.module
@@ -100,3 +100,12 @@ function payone_payment_payment_delete(\Payment $payment) {
   }, $payment->statuses);
   Transaction::deleteIds($psiids);
 }
+
+/**
+ * Implements hook_d7csp_hosts().
+ */
+function payone_payment_d7csp_hosts() {
+  $hosts['connect-src'][] = 'https://secure.pay1.de';
+  $hosts['script-src'][] = 'https://secure.pay1.de';
+  return $hosts;
+}