chore: image allow "data:" in csp (#19728)

9 months ago · bd7094b9f5
parent ff0feaf34e
commit bd7094b9f5
1 changed files with 1 additions and 1 deletions
--- a/web/middleware.ts
+++ b/web/middleware.ts
@ -37,7 +37,7 @@ export function middleware(request: NextRequest) {
    style-src 'self' 'unsafe-inline' ${scheme_source} ${whiteList};
    worker-src 'self' ${scheme_source} ${csp} ${whiteList};
    media-src 'self' ${scheme_source} ${csp} ${whiteList};
-    img-src *;
+    img-src * data:;
    font-src 'self';
    object-src 'none';
    base-uri 'self';