From 64244e1a4fe3d287fc7764e9f64c65777384fff0 Mon Sep 17 00:00:00 2001 From: Roeland Jago Douma Date: Mon, 7 Jan 2019 13:13:34 +0100 Subject: CSP: Allow fonts to be provided in data Signed-off-by: Roeland Jago Douma --- lib/public/AppFramework/Http/ContentSecurityPolicy.php | 1 + 1 file changed, 1 insertion(+) (limited to 'lib/public/AppFramework') diff --git a/lib/public/AppFramework/Http/ContentSecurityPolicy.php b/lib/public/AppFramework/Http/ContentSecurityPolicy.php index e9ecf000364..68aa4b5ddb4 100644 --- a/lib/public/AppFramework/Http/ContentSecurityPolicy.php +++ b/lib/public/AppFramework/Http/ContentSecurityPolicy.php @@ -80,6 +80,7 @@ class ContentSecurityPolicy extends EmptyContentSecurityPolicy { /** @var array Domains from which fonts can be loaded */ protected $allowedFontDomains = [ '\'self\'', + 'data:', ]; /** @var array Domains from which web-workers and nested browsing content can load elements */ protected $allowedChildSrcDomains = []; -- cgit v1.2.3