jan/miniflux-legacy
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Change CSP directives to allow data url

Browse Source
This commit is contained in:
Frederic Guillot 2015-08-21 18:18:08 -04:00
parent 8e9ed2f347
commit 9320a32780
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
controllers/common.php
View File

@ -48,7 +48,7 @@ Router\before(function($action) {
// HTTP secure headers // HTTP secure headers
Response\csp(array( Response\csp(array(
'media-src' => '*', 'media-src' => '*',
'img-src' => '*', 'img-src' => '* data:',
'frame-src' => Model\Config\get_iframe_whitelist(), 'frame-src' => Model\Config\get_iframe_whitelist(),
'referrer' => 'no-referrer', 'referrer' => 'no-referrer',
)); ));