]> Untitled Git - lemmy-ui.git/commitdiff
Fix csp header for svgs in firefox. Fixes #869 (#870)
authorDessalines <dessalines@users.noreply.github.com>
Tue, 22 Nov 2022 21:39:55 +0000 (16:39 -0500)
committerGitHub <noreply@github.com>
Tue, 22 Nov 2022 21:39:55 +0000 (16:39 -0500)
src/server/index.tsx

index 291989fcbea69d4d5dd8e0fc533a51860782f6a0..7d6200e89658682dca25f22a3bc90e6c844b5c49 100644 (file)
@@ -32,7 +32,7 @@ if (!process.env["LEMMY_UI_DISABLE_CSP"] && !process.env["LEMMY_UI_DEBUG"]) {
   server.use(function (_req, res, next) {
     res.setHeader(
       "Content-Security-Policy",
-      `default-src 'none'; connect-src *; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; form-action 'self'; base-uri 'self'; frame-src *`
+      `default-src 'self'; connect-src *; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; form-action 'self'; base-uri 'self'; frame-src *`
     );
     next();
   });