enable img-src blob: in /pad/

2017-07-13 11:19:45 +02:00 · 2017-07-13 11:19:45 +02:00 · 980d555500
parent d0d38aa2a3
commit 980d555500
1 changed files with 1 additions and 1 deletions
--- a/config.example.js
+++ b/config.example.js
@ -67,7 +67,7 @@ module.exports = {
         "connect-src 'self' ws: wss:",

        // (insecure remote) images are included by users of the wysiwyg who embed photos in their pads
-        "img-src *",
+        "img-src * blob:",
    ].join('; '),

    httpPort: 3000,