Fix quotes for COEP and COOP to be strictly standards compliant (CO-2…

…720)
COmanage · Jul 23, 2025 · cd9ba6a · cd9ba6a
1 parent b9a5004
commit cd9ba6a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/templates/element/httpHeaders.php b/app/templates/element/httpHeaders.php
@@ -36,8 +36,8 @@
 
   header("X-Content-Type-Options: nosniff");
   header("Permissions-Policy: accelerometer=(),autoplay=(),camera=(),cross-origin-isolated=(),display-capture=(),encrypted-media=(),fullscreen=(),geolocation=(),gyroscope=(),keyboard-map=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),web-share=(),xr-spatial-tracking=(),gamepad=(),hid=(),idle-detection=(),interest-cohort=(),serial=()");
-  header("Cross-Origin-Opener-Policy: same-origin");
-  header("Cross-Origin-Embedder-Policy: require-corp");
+  header('Cross-Origin-Opener-Policy: "same-origin"');
+  header('Cross-Origin-Embedder-Policy: "require-corp"');
   header("X-Permitted-Cross-Domain-Policies: none");
 
   // Add X-UA-Compatible header for IE