Merge pull request #76 from fritzmg/patch-2

un-deprecate `frame-src`
paragonie · Dec 18, 2023 · 2a68e22 · 2a68e22
2 parents 34b2d80 + 0d69592
commit 2a68e22
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/src/CSPBuilder.php b/src/CSPBuilder.php
@@ -171,14 +171,22 @@ public function addSource(string $directive, string $path): self
         $this->needsCompile = true;
         switch ($directive) {
             case 'child':
+            case 'child-src':
+                if ($this->supportOldBrowsers) {
+                    $this->policies['child-src']['allow'][] = $path;
+                    $this->policies['frame-src']['allow'][] = $path;
+                    return $this;
+                }
+                $directive = 'child-src';
+                break;
             case 'frame':
             case 'frame-src':
                 if ($this->supportOldBrowsers) {
                     $this->policies['child-src']['allow'][] = $path;
                     $this->policies['frame-src']['allow'][] = $path;
                     return $this;
                 }
-                $directive = 'child-src';
+                $directive = 'frame-src';
                 break;
             case 'connect':
             case 'socket':