chore: image allow "data:" in csp (#19728)
This commit is contained in:
@@ -37,7 +37,7 @@ export function middleware(request: NextRequest) {
|
||||
style-src 'self' 'unsafe-inline' ${scheme_source} ${whiteList};
|
||||
worker-src 'self' ${scheme_source} ${csp} ${whiteList};
|
||||
media-src 'self' ${scheme_source} ${csp} ${whiteList};
|
||||
img-src *;
|
||||
img-src * data:;
|
||||
font-src 'self';
|
||||
object-src 'none';
|
||||
base-uri 'self';
|
||||
|
Reference in New Issue
Block a user