starred/pocket-id-pocket-id-2
1
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2025-12-17 02:33:07 +03:00
Code Issues 116 Packages Projects Releases 10 Wiki Activity

fix: allow any image source but disallow base64

Browse Source
This commit is contained in:
Elias Schneider
2025-10-03 11:50:39 +02:00
parent 507f9490fa
commit 22f4254932
4 changed files with 4 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
backend/internal/middleware/csp_middleware.go
View File

@@ -34,7 +34,7 @@ func (m *CspMiddleware) Add() gin.HandlerFunc {
"object-src 'none'; " +
"frame-ancestors 'none'; " +
"form-action 'self'; " +
"img-src 'self' data: blob:; " +
"img-src * blob:;" +
"font-src 'self'; " +
"style-src 'self' 'unsafe-inline'; " +
"script-src 'self' 'nonce-" + nonce + "'"