Different configs in local and production environment

[jcerdan]

Hello,

I'm using this package for CSP settings in a website, but I have a problem with local and production environments.
Both share the same config file but I would like to have different config files as production environment would have stronger policies (not allowing http: scheme for example)
I don't really know how to do that as App Object is not available when reading the config php file.

Has anyone met and solved this problem?

Best

[bepsvpt]

Hello @jcerdan,

You can dynamically adjust the secure-headers config in AppServiceProvider.

[jcerdan]

Hi,

Thanks @bepsvpt

Good. I'll try with mergeConfigFrom() in AppServiceProvider to load the production config file in production env.

Regards,