hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge branch 'connect-src' into 'develop'

Browse source 
Add blob: to connect-src CSP, fixes #1827

Closes #1827

See merge request pleroma/pleroma!2608
This commit is contained in:
rinpatch 2020-05-29 19:26:54 +00:00
commit 660d49227b
2 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/pleroma/plugs/http_security_plug.ex
View file

@ -78,7 +78,7 @@ defmodule Pleroma.Plugs.HTTPSecurityPlug do
{img_src, media_src}
end
connect_src = ["connect-src 'self' ", static_url, ?\s, websocket_url]
connect_src = ["connect-src 'self' blob: ", static_url, ?\s, websocket_url]
connect_src =
if Pleroma.Config.get(:env) == :dev do