Add blob: to CSP image-src

safing · Dec 1, 2023 · 9a29e2e · 9a29e2e
1 parent 3afd500
commit 9a29e2e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/api/router.go b/api/router.go
@@ -147,7 +147,7 @@ func (mh *mainHandler) handle(w http.ResponseWriter, r *http.Request) error {
 			"default-src 'self'; "+
 				"connect-src https://*.safing.io 'self'; "+
 				"style-src 'self' 'unsafe-inline'; "+
-				"img-src 'self' data:",
+				"img-src 'self' data: blob:",
 		)
 	}