sam/pleroma
sam/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Merge branch 'bugfix/csp-unproxied' into 'develop'

Browse source 
http_security_plug.ex: Fix non-proxied media

See merge request pleroma/pleroma!2610
This commit is contained in:
rinpatch 2020-05-29 21:23:49 +00:00
commit d23b3701d8
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/pleroma/plugs/http_security_plug.ex
View file

@ -75,7 +75,7 @@ defp csp_string do
sources = get_proxy_and_attachment_sources()
{[img_src, sources], [media_src, sources]}
else
{img_src, media_src}
{[img_src, " https:"], [media_src, " https:"]}
end
connect_src = ["connect-src 'self' blob: ", static_url, ?\s, websocket_url]