Authorize data: images in CSP header (#1138)

This commit is contained in:
Xavier Guimard 2017-03-14 12:08:01 +00:00
parent 580c161855
commit 85ad473cd7
4 changed files with 4 additions and 4 deletions

View File

@ -28,7 +28,7 @@ sub defaultValues {
'cspConnect' => '\'self\'', 'cspConnect' => '\'self\'',
'cspDefault' => '\'self\'', 'cspDefault' => '\'self\'',
'cspFont' => '\'self\'', 'cspFont' => '\'self\'',
'cspImg' => '\'self\'', 'cspImg' => '\'self\' data:',
'cspScript' => '\'self\'', 'cspScript' => '\'self\'',
'cspStyle' => '\'self\'', 'cspStyle' => '\'self\'',
'dbiAuthnLevel' => 2, 'dbiAuthnLevel' => 2,

View File

@ -813,7 +813,7 @@ qr/(?:(?:https?):\/\/(?:(?:(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.]
'type' => 'text' 'type' => 'text'
}, },
'cspImg' => { 'cspImg' => {
'default' => '\'self\'', 'default' => '\'self\' data:',
'type' => 'text' 'type' => 'text'
}, },
'cspScript' => { 'cspScript' => {

View File

@ -467,7 +467,7 @@ sub attributes {
}, },
cspImg => { cspImg => {
type => 'text', type => 'text',
default => "'self'", default => "'self' data:",
documentation => 'Image source for Content-Security-Policy', documentation => 'Image source for Content-Security-Policy',
}, },
cspScript => { cspScript => {

File diff suppressed because one or more lines are too long