For #3998 - Disable CSP if debug=true

To avoid all the nonce hell from debugbar
2017-09-29 04:53:09 -07:00
parent 05a8ba9a8e
commit efd71f8bfe
1 changed files with 1 additions and 1 deletions
@@ -14,7 +14,7 @@ class ContentSecurityPolicyHeader
     */
    public function handle($request, Closure $next)
    {
-        if (config('app.disable_csp')=='true') {
+        if ((config('app.debug')=='true')  || (config('app.disable_csp')=='true')) {
            $response = $next($request);
            return $response;
        }