index.js: Add "data:" as an allowed image source in CSP

Signed-off-by: Aaron <admin@datahoarder.dev>
2021-04-21 21:40:15 +02:00 · 2021-04-21 21:40:15 +02:00 · f5bb74e921
parent 352fba6302
commit f5bb74e921
1 changed files with 1 additions and 1 deletions
--- a/server/routes/index.js
+++ b/server/routes/index.js
@ -38,7 +38,7 @@ module.exports = function(app) {
          "'self'",
          config.base_url.replace(/^https:\/\//, 'wss://')
        ],
-        imgSrc: ["'self'"],
+        imgSrc: ["'self'", "data:"],
        scriptSrc: [
          "'self'",
          function(req) {