diff options
| author | Chocobozzz <me@florianbigard.com> | 2019-08-22 11:14:01 +0200 |
|---|---|---|
| committer | Chocobozzz <me@florianbigard.com> | 2019-08-22 11:14:01 +0200 |
| commit | ebe7f5872617311e33dbca1f7f0d2556932c01a0 (patch) | |
| tree | 82069451d83861066a879fd8717ec48cf7504b2d | |
| parent | 217ffacfdde0972a3ee4e2db152e1710139b4ec4 (diff) | |
| download | PeerTube-ebe7f5872617311e33dbca1f7f0d2556932c01a0.tar.gz PeerTube-ebe7f5872617311e33dbca1f7f0d2556932c01a0.tar.zst PeerTube-ebe7f5872617311e33dbca1f7f0d2556932c01a0.zip | |
Fix image and plugin CSP
| -rw-r--r-- | server/middlewares/csp.ts | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/server/middlewares/csp.ts b/server/middlewares/csp.ts index d484b3021..d11d70790 100644 --- a/server/middlewares/csp.ts +++ b/server/middlewares/csp.ts | |||
| @@ -7,8 +7,8 @@ const baseDirectives = Object.assign({}, | |||
| 7 | connectSrc: ['*', 'data:'], | 7 | connectSrc: ['*', 'data:'], |
| 8 | mediaSrc: ["'self'", 'https:', 'blob:'], | 8 | mediaSrc: ["'self'", 'https:', 'blob:'], |
| 9 | fontSrc: ["'self'", 'data:'], | 9 | fontSrc: ["'self'", 'data:'], |
| 10 | imgSrc: ["'self'", 'data:'], | 10 | imgSrc: ["'self'", 'data:', 'blob:'], |
| 11 | scriptSrc: ["'self' 'unsafe-inline' 'unsafe-eval'"], | 11 | scriptSrc: ["'self' 'unsafe-inline' 'unsafe-eval'", 'blob:'], |
| 12 | styleSrc: ["'self' 'unsafe-inline'"], | 12 | styleSrc: ["'self' 'unsafe-inline'"], |
| 13 | objectSrc: ["'none'"], // only define to allow plugins, else let defaultSrc 'none' block it | 13 | objectSrc: ["'none'"], // only define to allow plugins, else let defaultSrc 'none' block it |
| 14 | formAction: ["'self'"], | 14 | formAction: ["'self'"], |