Apply lanodan's suggestion(s) to 1 file(s)
This commit is contained in:
parent
2a07411b0c
commit
d838d1990b
|
@ -93,7 +93,7 @@ defp csp_string do
|
|||
|
||||
img_src = "img-src 'self' data: blob:"
|
||||
media_src = "media-src 'self'"
|
||||
connect_src = ["connect-src 'self' blob: ", ?\s, websocket_url]
|
||||
connect_src = ["connect-src 'self' blob: ", static_url, ?\s, websocket_url]
|
||||
|
||||
# Strict multimedia CSP enforcement only when MediaProxy is enabled
|
||||
{img_src, media_src, connect_src} =
|
||||
|
|
Loading…
Reference in New Issue