From 745cedfedd806f64ca26a7bb37068d932a4eb729 Mon Sep 17 00:00:00 2001 From: Florian Dold Date: Tue, 6 Feb 2018 12:06:42 +0100 Subject: serve images for staging correctly, allow data URLs as img-src --- etc/nginx/conf.d/talerssl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'etc/nginx/conf.d/talerssl') diff --git a/etc/nginx/conf.d/talerssl b/etc/nginx/conf.d/talerssl index e5d5411..3aa9a47 100644 --- a/etc/nginx/conf.d/talerssl +++ b/etc/nginx/conf.d/talerssl @@ -10,5 +10,5 @@ add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; prelo add_header X-XSS-Protection "1; mode=block"; add_header X-Frame-Options "SAMEORIGIN"; add_header X-Content-Type-Options "nosniff"; -add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' wss://buildbot.taler.net"; +add_header Content-Security-Policy "default-src 'self'; img-src data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' wss://buildbot.taler.net"; add_header Referrer-Policy "same-origin"; -- cgit v1.2.3