📝 docs: add data: to CSP to load local svg

This commit is contained in:
welpo 2023-04-28 16:42:16 +02:00
parent 9512bbb194
commit 3b22e6be6c
No known key found for this signature in database
GPG Key ID: A2F978CF4EC1F5A6

View File

@ -44,7 +44,7 @@ menu = [
# Default config, allows for https remote images and embedding YouTube and Vimeo content.
# This configuration (along with the right webserver settings) gets an A+ in Mozilla's Observatory: https://observatory.mozilla.org
allowed_domains = [
{ directive = "img-src", domains = ["'self'", "https://*"] },
{ directive = "img-src", domains = ["'self'", "https://*", "data:"] },
{ directive = "script-src", domains = ["'self'"] },
{ directive = "style-src", domains = ["'self'"] },
{ directive = "frame-src", domains = ["player.vimeo.com", "https://www.youtube-nocookie.com"] },