Chapril/drop.chapril.org-firefoxsend
Chapril/drop.chapril.org-firefoxsend
25
1
Fork 0
Code Issues Releases Activity

index.js: Add "data:" as an allowed image source in CSP

Browse Source 
Signed-off-by: Aaron <admin@datahoarder.dev>
This commit is contained in:
Aaron 2021-04-21 21:40:15 +02:00 committed by GitHub
parent 352fba6302
commit f5bb74e921
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
server/routes/index.js
View File

@ -38,7 +38,7 @@ module.exports = function(app) {
"'self'", "'self'",
config.base_url.replace(/^https:\/\//, 'wss://') config.base_url.replace(/^https:\/\//, 'wss://')
], ],
imgSrc: ["'self'"], imgSrc: ["'self'", "data:"],
scriptSrc: [ scriptSrc: [
"'self'", "'self'",
function(req) { function(req) {