forks
/
peertube
1
0
Fork 0
Code Releases Activity

Fix image and plugin CSP

This commit is contained in:
Chocobozzz 2019-08-22 11:14:01 +02:00
parent 217ffacfdd
commit ebe7f58726
No known key found for this signature in database
GPG Key ID: 583A612D890159BE
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
server/middlewares/csp.ts
View File

@ -7,8 +7,8 @@ const baseDirectives = Object.assign({},
connectSrc: ['*', 'data:'],
mediaSrc: ["'self'", 'https:', 'blob:'],
fontSrc: ["'self'", 'data:'],
imgSrc: ["'self'", 'data:'],
scriptSrc: ["'self' 'unsafe-inline' 'unsafe-eval'"],
imgSrc: ["'self'", 'data:', 'blob:'],
scriptSrc: ["'self' 'unsafe-inline' 'unsafe-eval'", 'blob:'],
styleSrc: ["'self' 'unsafe-inline'"],
objectSrc: ["'none'"], // only define to allow plugins, else let defaultSrc 'none' block it
formAction: ["'self'"],