MC-30971: CSP policies must be defined in a single header

Oleksandr Gorkun · Oleksandr Gorkun · commit 1e2948a1ded7 · 2020-02-03T14:12:54.000-06:00
diff --git a/app/code/Magento/Csp/Model/Policy/Renderer/SimplePolicyHeaderRenderer.php b/app/code/Magento/Csp/Model/Policy/Renderer/SimplePolicyHeaderRenderer.php
@@ -58,7 +58,7 @@ public function render(PolicyInterface $policy, HttpResponse $response): void
             $response->setHeader('Report-To', json_encode($reportToData), true);
         }
         if ($existing = $response->getHeader($header)) {
-            $value = $existing->getFieldValue() .' ' .$value;
+            $value = $value .' ' .$existing->getFieldValue();
         }
         $response->setHeader($header, $value, true);
     }

Original file line number	Diff line number	Diff line change
`@@ -58,7 +58,7 @@ public function render(PolicyInterface $policy, HttpResponse $response): void`
`58`	`58`	`$response->setHeader('Report-To', json_encode($reportToData), true);`
`59`	`59`	`}`
`60`	`60`	`if ($existing = $response->getHeader($header)) {`
`61`		`- $value = $existing->getFieldValue() .' ' .$value;`
	`61`	`+ $value = $value .' ' .$existing->getFieldValue();`
`62`	`62`	`}`
`63`	`63`	`$response->setHeader($header, $value, true);`
`64`	`64`	`}`