From 3b22e6be6c1ff666c767cea0af4b9cd48f353c46 Mon Sep 17 00:00:00 2001 From: welpo Date: Fri, 28 Apr 2023 16:42:16 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=93=9D=20docs:=20add=20`data:`=20to=20CSP?= =?UTF-8?q?=20to=20load=20local=20svg?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- theme.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/theme.toml b/theme.toml index 0f669de..b392b92 100644 --- a/theme.toml +++ b/theme.toml @@ -44,7 +44,7 @@ menu = [ # Default config, allows for https remote images and embedding YouTube and Vimeo content. # This configuration (along with the right webserver settings) gets an A+ in Mozilla's Observatory: https://observatory.mozilla.org allowed_domains = [ - { directive = "img-src", domains = ["'self'", "https://*"] }, + { directive = "img-src", domains = ["'self'", "https://*", "data:"] }, { directive = "script-src", domains = ["'self'"] }, { directive = "style-src", domains = ["'self'"] }, { directive = "frame-src", domains = ["player.vimeo.com", "https://www.youtube-nocookie.com"] },