mirror of
https://github.com/timvisee/send.git
synced 2026-03-05 13:39:54 -05:00
index.js: Add "data:" as an allowed image source in CSP
Signed-off-by: Aaron <admin@datahoarder.dev>
This commit is contained in:
@@ -38,7 +38,7 @@ module.exports = function(app) {
|
||||
"'self'",
|
||||
config.base_url.replace(/^https:\/\//, 'wss://')
|
||||
],
|
||||
imgSrc: ["'self'"],
|
||||
imgSrc: ["'self'", "data:"],
|
||||
scriptSrc: [
|
||||
"'self'",
|
||||
function(req) {
|
||||
|
||||
Reference in New Issue
Block a user