Allow 'data:' for img src in app CSP

Disallowing base64 images in the app resulted in broken image placeholders for things like pronunciation guides, business reviews, etc.
2021-05-05 12:51:11 -04:00 · 2021-05-05 12:51:11 -04:00 · a7bf9728e3
parent 35aa02167c
commit a7bf9728e3
1 changed files with 1 additions and 1 deletions
--- a/app/init.py
+++ b/app/init.py
@ -51,7 +51,7 @@ app.config['BANG_FILE'] = os.path.join(
    'bangs.json')
 app.config['CSP'] = 'default-src \'none\';' \
                    'manifest-src \'self\';' \
-                    'img-src \'self\';' \
+                    'img-src \'self\' data:;' \
                    'style-src \'self\' \'unsafe-inline\';' \
                    'script-src \'self\';' \
                    'media-src \'self\';' \