Fix csp policy for the ML

2025-09-25 08:19:07 +00:00 · 2021-11-09 20:49:21 +01:00 · 2021-11-09 20:49:21 +01:00 · a1c31c7e43
commit a1c31c7e43
parent 67fee6f3d5
1 changed files with 2 additions and 0 deletions
--- a/packages/core/strapi/lib/middlewares/security.js
+++ b/packages/core/strapi/lib/middlewares/security.js
@ -12,6 +12,8 @@ const defaults = {
    useDefaults: true,
    directives: {
      'connect-src': ["'self'", 'https:'],
+      'img-src': ["'self'", 'data:', 'blob:'],
+      'media-src': ["'self'", 'data:', 'blob:'],
    },
  },
  xssFilter: false,