bitwarden/server
1
0
Fork 0
mirror of https://github.com/bitwarden/server synced 2025-12-12 22:33:45 +00:00
Code Issues Releases Wiki Activity

allow blobs in object-src CSP

Browse Source
This commit is contained in:
Kyle Spearrin
2018-11-06 22:26:41 -05:00
parent dc3e083bf0
commit 32f686cba6
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
util/Setup/NginxConfigBuilder.cs
View File

@@ -10,7 +10,8 @@ namespace Bit.Setup
"default-src 'self'; style-src 'self' 'unsafe-inline'; " + "default-src 'self'; style-src 'self' 'unsafe-inline'; " +
"img-src 'self' data: https://haveibeenpwned.com https://www.gravatar.com; " + "img-src 'self' data: https://haveibeenpwned.com https://www.gravatar.com; " +
"child-src 'self' https://*.duosecurity.com; frame-src 'self' https://*.duosecurity.com; " + "child-src 'self' https://*.duosecurity.com; frame-src 'self' https://*.duosecurity.com; " +
"connect-src 'self' wss://{0} https://haveibeenpwned.com https://api.pwnedpasswords.com;"; "connect-src 'self' wss://{0} https://haveibeenpwned.com https://api.pwnedpasswords.com; " +
"object-src 'self' blob:;";
private readonly Context _context; private readonly Context _context;