mentos1386/send
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

index.js: Add "data:" as an allowed image source in CSP

Browse source 
Signed-off-by: Aaron <admin@datahoarder.dev>
This commit is contained in:
Aaron 2021-04-21 21:40:15 +02:00 committed by GitHub
parent 352fba6302
commit f5bb74e921
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
server/routes/index.js
View file

@ -38,7 +38,7 @@ module.exports = function(app) {
"'self'", "'self'",
config.base_url.replace(/^https:\/\//, 'wss://') config.base_url.replace(/^https:\/\//, 'wss://')
], ],
imgSrc: ["'self'"], imgSrc: ["'self'", "data:"],
scriptSrc: [ scriptSrc: [
"'self'", "'self'",
function(req) { function(req) {