diff --git a/lam/lib/security.inc b/lam/lib/security.inc index e1fb6cd4..0aaf5ca6 100644 --- a/lam/lib/security.inc +++ b/lam/lib/security.inc @@ -687,7 +687,7 @@ function getSecurityTokenValue() { function setLAMHeaders() { if (!headers_sent()) { header('X-Frame-Options: sameorigin'); - header('Content-Security-Policy: frame-ancestors \'self\'; form-action \'self\'; base-uri \'none\'; object-src \'none\'; frame-src \'self\' https://*.duosecurity.com; worker-src \'self\''); + header('Content-Security-Policy: frame-ancestors \'self\'; form-action \'self\'; base-uri \'none\'; object-src \'none\'; frame-src \'self\' https://*.duosecurity.com https://www.google.com/recaptcha/; worker-src \'self\''); header('X-Content-Type-Options: nosniff'); header('X-XSS-Protection: 1; mode=block'); header("Feature-Policy: ambient-light-sensor 'none'; autoplay 'none'; accelerometer 'none'; camera 'none'; encrypted-media 'none'; fullscreen 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; speaker 'none'; sync-xhr 'self'; usb 'none'; vr 'none'");