From 9894ca78f0a4bc76160edc3f20982a4eca12e4d4 Mon Sep 17 00:00:00 2001
From: FreeScout <freescout.helpdesk@gmail.com>
Date: Thu, 9 May 2024 06:34:05 -0700
Subject: [PATCH] app.csp_custom env parameter

---
 app/Misc/Helper.php | 4 ++--
 config/app.php      | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/app/Misc/Helper.php b/app/Misc/Helper.php
index f52984569..c7c968b27 100644
--- a/app/Misc/Helper.php
+++ b/app/Misc/Helper.php
@@ -2101,8 +2101,8 @@ public static function cspMetaTag()
         $nonce = \Helper::cspNonce();
 
         return "<meta http-equiv=\"Content-Security-Policy\" content=\"script-src 'self' 'nonce-".$nonce."' "
-            .config('app.csp_script_src').' '.\Eventy::filter('csp.script_src', '')."\">";
-        //<meta property=\"csp-nonce\" id=\"csp-nonce\" content=\"".$nonce."\">";
+            .config('app.csp_script_src').' '.\Eventy::filter('csp.script_src', '').";"
+            .config('app.csp_custom').\Eventy::filter('csp.custom', '')."\">";
     }
 
     public static function cspNonceAttr()
diff --git a/config/app.php b/config/app.php
index 7ccbe64f4..eac4217b2 100644
--- a/config/app.php
+++ b/config/app.php
@@ -473,6 +473,7 @@
     */
     'csp_enabled'    => env('APP_CSP_ENABLED', true),
     'csp_script_src' => env('APP_CSP_SCRIPT_SRC', ''),
+    'csp_custom'     => env('APP_CSP_CUSTOM', ''),
 
     /*
     |--------------------------------------------------------------------------