mirror of
https://seed.radicle.dev/rad:z4V1sjrXqjvFdnCUbxPFqd5p4DtH5.git
synced 2026-11-16 03:40:37 +08:00
Cleanup img-src attributes in the CSP directive
By restricting `img-src` in our CSP, we weren't allowing images from e.g. https://github.com like CI badges to display. With this change we allow users to add images from any `https`, `data` or `blob` source, which is more user friendly.
This commit is contained in:
@@ -21,7 +21,7 @@
|
||||
"csp": {
|
||||
"default-src": "'self'",
|
||||
"connect-src": "ipc: http://ipc.localhost",
|
||||
"img-src": "'self' asset: http://asset.localhost blob: data:",
|
||||
"img-src": "'self' blob: data: https:",
|
||||
"style-src": "'unsafe-inline' 'self'"
|
||||
},
|
||||
"pattern": {
|
||||
|
||||
Reference in New Issue
Block a user