Fix quotes for COEP and COOP to be strictly standards compliant (CO-2…

…720)
COmanage · Jun 25, 2025 · e4883e3 · e4883e3
1 parent 073775c
commit e4883e3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/templates/element/httpHeaders.php b/app/templates/element/httpHeaders.php
@@ -33,8 +33,8 @@
   header("Content-Security-Policy: object-src 'none'; base-uri 'none'; frame-ancestors 'self'");
   header("X-Content-Type-Options: nosniff");
   header("Permissions-Policy: accelerometer=(),autoplay=(),camera=(),cross-origin-isolated=(),display-capture=(),encrypted-media=(),fullscreen=(),geolocation=(),gyroscope=(),keyboard-map=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),web-share=(),xr-spatial-tracking=(),gamepad=(),hid=(),idle-detection=(),interest-cohort=(),serial=()");
-  header("Cross-Origin-Opener-Policy: same-origin");
-  header("Cross-Origin-Embedder-Policy: require-corp");
+  header('Cross-Origin-Opener-Policy: "same-origin"');
+  header('Cross-Origin-Embedder-Policy: "require-corp"');
   header("X-Permitted-Cross-Domain-Policies: none");
 
 // Add X-UA-Compatible header for IE