src-advisory/SRCmail
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow blob images in CSP for inline drag-and-drop #163

Browse Source
This commit is contained in:
Linus Rath
2026-04-08 13:10:04 +02:00
parent 4024732696
commit 79418f013a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
proxy.ts
+1 -1
View File
@@ -20,7 +20,7 @@ export function proxy(request: NextRequest) {
`default-src 'self'`, `default-src 'self'`,
`script-src ${scriptSrc}`, `script-src ${scriptSrc}`,
`style-src 'self' 'unsafe-inline'`, `style-src 'self' 'unsafe-inline'`,
`img-src 'self' data: https:`, `img-src 'self' data: blob: https:`,
`font-src 'self'`, `font-src 'self'`,
`connect-src ${connectSrc}`, `connect-src ${connectSrc}`,
`frame-src 'none'`, `frame-src 'none'`,