Merge pull request #2953 from aleksandrychev/ENT-4400_3.21.x

ENT-4400: Allowed blob image-src in the Mission Portal CSP rules (3.21.x)
cfengine · Oct 11, 2024 · 29d0cf0 · 29d0cf0
2 parents c05b0ab + 1bcc230
commit 29d0cf0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cfe_internal/enterprise/templates/httpd.conf.mustache b/cfe_internal/enterprise/templates/httpd.conf.mustache
@@ -210,7 +210,7 @@ LogLevel warn
     object-src 'none'; \
     frame-src 'self'; \
     child-src 'self'; \
-    img-src 'self' data: avatars.githubusercontent.com badges.gitter.im fonts.gstatic.com kiwiirc.com raw.githubusercontent.com; \
+    img-src 'self' data: blob: avatars.githubusercontent.com badges.gitter.im fonts.gstatic.com kiwiirc.com raw.githubusercontent.com; \
     font-src 'self' data: fonts.googleapis.com fonts.gstatic.com; \
     connect-src 'self' fonts.gstatic.com fonts.googleapis.com; \
     manifest-src 'self'; \