From a304f34e6b3f379676b0885b26e6dbf3a895d752 Mon Sep 17 00:00:00 2001
From: ralf <rb@egroupware.org>
Date: Wed, 29 Jun 2022 08:59:59 +0200
Subject: [PATCH] fix PHP Error: [] operator not supported for strings

---
 api/src/Header/ContentSecurityPolicy.php | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/api/src/Header/ContentSecurityPolicy.php b/api/src/Header/ContentSecurityPolicy.php
index db8677e5d6..893bcda7b9 100644
--- a/api/src/Header/ContentSecurityPolicy.php
+++ b/api/src/Header/ContentSecurityPolicy.php
@@ -58,6 +58,10 @@ class ContentSecurityPolicy
 	 */
 	public static function add($source, $attrs, $reset=false)
 	{
+		if (!is_array($attrs))
+		{
+			$attrs = (array)$attrs;
+		}
 		if ($reset)
 		{
 			self::$sources[$source] = [];
@@ -74,7 +78,7 @@ class ContentSecurityPolicy
 				{
 					foreach($app_additional as $app => $additional)
 					{
-						if ($additional) $attrs = array_unique(array_merge((array)$attrs, $additional));
+						if ($additional) $attrs = array_unique(array_merge($attrs, $additional));
 					}
 				}
 			}
@@ -83,7 +87,7 @@ class ContentSecurityPolicy
 		// Shoelace needs connect-src: data:
 		if ($source === 'connect-src') /** @noinspection UnsupportedStringOffsetOperationsInspection */ $attrs[] = 'data:';
 
-		foreach((array)$attrs as $attr)
+		foreach($attrs as $attr)
 		{
 			if (in_array($attr, array('none', 'self', 'unsafe-eval', 'unsafe-inline')))
 			{