summaryrefslogtreecommitdiffstats
path: root/lib/public/appframework
diff options
context:
space:
mode:
authorMorris Jobke <hey@morrisjobke.de>2015-08-10 23:05:07 +0200
committerMorris Jobke <hey@morrisjobke.de>2015-08-10 23:05:07 +0200
commitd56e03bb94b8eef870a186f5a15c0d36a6433a21 (patch)
tree45254deb4c27ba65e341bcb6a740d8cd7e025ddc /lib/public/appframework
parent9650f3ecbebfc7c7cc30b787acae3490b0f4e6b5 (diff)
parent5590d64612c9dfe59b50108a26621b4feb570d27 (diff)
downloadnextcloud-server-d56e03bb94b8eef870a186f5a15c0d36a6433a21.tar.gz
nextcloud-server-d56e03bb94b8eef870a186f5a15c0d36a6433a21.zip
Merge pull request #18096 from sualko/patch-1
add data: to allowed image domains
Diffstat (limited to 'lib/public/appframework')
-rw-r--r--lib/public/appframework/http/contentsecuritypolicy.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/public/appframework/http/contentsecuritypolicy.php b/lib/public/appframework/http/contentsecuritypolicy.php
index 9c7218dc8ba..ee36f7aac17 100644
--- a/lib/public/appframework/http/contentsecuritypolicy.php
+++ b/lib/public/appframework/http/contentsecuritypolicy.php
@@ -63,6 +63,7 @@ class ContentSecurityPolicy {
/** @var array Domains from which images can get loaded */
private $allowedImageDomains = [
'\'self\'',
+ 'data:',
];
/** @var array Domains to which connections can be done */
private $allowedConnectDomains = [