From aac517749507c0ad060fe040d3f3adf34f757e03 Mon Sep 17 00:00:00 2001
From: Andras Bacsai <andras.bacsai@gmail.com>
Date: Fri, 26 May 2023 11:52:03 +0200
Subject: [PATCH] hmm

---
 bootstrap/helpers/shared.php                | 4 ++++
 resources/views/components/layout.blade.php | 3 +++
 2 files changed, 7 insertions(+)

diff --git a/bootstrap/helpers/shared.php b/bootstrap/helpers/shared.php
index 57fa14c27..30774be23 100644
--- a/bootstrap/helpers/shared.php
+++ b/bootstrap/helpers/shared.php
@@ -6,6 +6,10 @@ use Illuminate\Support\Facades\Route;
 use Visus\Cuid2\Cuid2;
 use Illuminate\Support\Str;
 
+function is_https()
+{
+    return request()->secure();
+}
 function general_error_handler(\Throwable $e, $that = null, $isJson = false)
 {
     try {
diff --git a/resources/views/components/layout.blade.php b/resources/views/components/layout.blade.php
index dd8030800..0e3fcb53f 100644
--- a/resources/views/components/layout.blade.php
+++ b/resources/views/components/layout.blade.php
@@ -6,6 +6,9 @@
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <link rel="preconnect" href="https://api.fonts.coollabs.io" crossorigin>
     <link href="https://api.fonts.coollabs.io/css2?family=Inter&display=swap" rel="stylesheet">
+    @if (request()->secure())
+        <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
+    @endif
     @env('local')
     <title>Coolify - localhost</title>
     <link rel="icon" href="{{ asset('favicon-dev.png') }}" type="image/x-icon" />