yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-09-25 08:19:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix csp policy for the ML

Browse Source
This commit is contained in:
Alexandre Bodin 2021-11-09 20:49:21 +01:00
parent 67fee6f3d5
commit a1c31c7e43
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/core/strapi/lib/middlewares/security.js
View File

@ -12,6 +12,8 @@ const defaults = {
useDefaults: true, useDefaults: true,
directives: { directives: {
'connect-src': ["'self'", 'https:'], 'connect-src': ["'self'", 'https:'],
'img-src': ["'self'", 'data:', 'blob:'],
'media-src': ["'self'", 'data:', 'blob:'],
}, },
}, },
xssFilter: false, xssFilter: false,