Fix CSP for images for legacy apps

Fixes #19425
2015-09-28 23:21:26 +02:00 · 2015-09-28 23:21:26 +02:00 · c4bac1655d
parent 7fa9f29d7f
commit c4bac1655d
1 changed files with 1 additions and 1 deletions
--- a/lib/private/response.php
+++ b/lib/private/response.php
@ -247,7 +247,7 @@ class OC_Response {
 			. 'script-src \'self\' \'unsafe-eval\'; '
 			. 'style-src \'self\' \'unsafe-inline\'; '
 			. 'frame-src *; '
-			. 'img-src *; '
+			. 'img-src * data:; '
 			. 'font-src \'self\' data:; '
 			. 'media-src *; ' 
 			. 'connect-src *';