mirror of
https://gitlab.com/timvisee/send.git
synced 2025-12-06 22:20:55 +03:00
index.js: Add "data:" as an allowed image source in CSP
Signed-off-by: Aaron <admin@datahoarder.dev>
This commit is contained in:
@@ -38,7 +38,7 @@ module.exports = function(app) {
|
||||
"'self'",
|
||||
config.base_url.replace(/^https:\/\//, 'wss://')
|
||||
],
|
||||
imgSrc: ["'self'"],
|
||||
imgSrc: ["'self'", "data:"],
|
||||
scriptSrc: [
|
||||
"'self'",
|
||||
function(req) {
|
||||
|
||||
Reference in New Issue
Block a user