From f5bb74e921fcd49a7aed55a8bc19e15cbb614164 Mon Sep 17 00:00:00 2001
From: Aaron <admin@datahoarder.dev>
Date: Wed, 21 Apr 2021 21:40:15 +0200
Subject: [PATCH] index.js: Add "data:" as an allowed image source in CSP

Signed-off-by: Aaron <admin@datahoarder.dev>
---
 server/routes/index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/routes/index.js b/server/routes/index.js
index 80d25707..dba0cfd1 100644
--- a/server/routes/index.js
+++ b/server/routes/index.js
@@ -38,7 +38,7 @@ module.exports = function(app) {
           "'self'",
           config.base_url.replace(/^https:\/\//, 'wss://')
         ],
-        imgSrc: ["'self'"],
+        imgSrc: ["'self'", "data:"],
         scriptSrc: [
           "'self'",
           function(req) {