mirror of
https://github.com/strapi/strapi.git
synced 2025-10-17 19:13:25 +00:00
one more fix
This commit is contained in:
parent
20deb8d3ec
commit
d32c487176
@ -57,18 +57,18 @@ Due to the default settings in the Strapi Security Middleware you will need to m
|
||||
|
||||
`./config/middlewares.js`
|
||||
|
||||
````js
|
||||
```js
|
||||
module.exports = [
|
||||
// ...
|
||||
{
|
||||
name: "strapi::security",
|
||||
name: 'strapi::security',
|
||||
config: {
|
||||
contentSecurityPolicy: {
|
||||
useDefaults: true,
|
||||
directives: {
|
||||
"connect-src": ["'self'", "https:"],
|
||||
"img-src": ["'self'", "data:", "blob:", "yourBucketName.s3.yourRegion.amazonaws.com"],
|
||||
"media-src": ["'self'", "data:", "blob:", "yourBucketName.s3.yourRegion.amazonaws.com"],
|
||||
'connect-src': ["'self'", 'https:'],
|
||||
'img-src': ["'self'", 'data:', 'blob:', 'yourBucketName.s3.yourRegion.amazonaws.com'],
|
||||
'media-src': ["'self'", 'data:', 'blob:', 'yourBucketName.s3.yourRegion.amazonaws.com'],
|
||||
upgradeInsecureRequests: null,
|
||||
},
|
||||
},
|
||||
@ -90,4 +90,4 @@ These are the minimum amount of permissions needed for this provider to work.
|
||||
"s3:DeleteObject",
|
||||
"s3:PutObjectAcl"
|
||||
],
|
||||
````
|
||||
```
|
||||
|
Loading…
x
Reference in New Issue
Block a user