interesting
/
PeerTube
mirror of https://github.com/Chocobozzz/PeerTube.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Fix image and plugin CSP

This commit is contained in:
Chocobozzz 2019-08-22 11:14:01 +02:00
parent 217ffacfdd
commit ebe7f58726
No known key found for this signature in database
GPG Key ID: 583A612D890159BE
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
server/middlewares/csp.ts
View File

@ -7,8 +7,8 @@ const baseDirectives = Object.assign({},
connectSrc: ['*', 'data:'], connectSrc: ['*', 'data:'],
mediaSrc: ["'self'", 'https:', 'blob:'], mediaSrc: ["'self'", 'https:', 'blob:'],
fontSrc: ["'self'", 'data:'], fontSrc: ["'self'", 'data:'],
imgSrc: ["'self'", 'data:'], imgSrc: ["'self'", 'data:', 'blob:'],
scriptSrc: ["'self' 'unsafe-inline' 'unsafe-eval'"], scriptSrc: ["'self' 'unsafe-inline' 'unsafe-eval'", 'blob:'],
styleSrc: ["'self' 'unsafe-inline'"], styleSrc: ["'self' 'unsafe-inline'"],
objectSrc: ["'none'"], // only define to allow plugins, else let defaultSrc 'none' block it objectSrc: ["'none'"], // only define to allow plugins, else let defaultSrc 'none' block it
formAction: ["'self'"], formAction: ["'self'"],