add self to image csp

5 years ago · abd4991659
parent 6149ddf99b
commit abd4991659
1 changed files with 1 additions and 1 deletions
--- a/apps/block_scout_web/lib/block_scout_web/csp_header.ex
+++ b/apps/block_scout_web/lib/block_scout_web/csp_header.ex
@ -15,7 +15,7 @@ defmodule BlockScoutWeb.CSPHeader do
        default-src 'self';\
        script-src 'self' 'unsafe-inline' 'unsafe-eval';\
        style-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com;\
-        img-src * data:;\
+        img-src 'self' * data:;\
        font-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.gstatic.com data:;\
      "
    })