Fixing QR code CSP, try 2. Fixes #2241 (#2242)

Co-authored-by: SleeplessOne1917 <insomnia_void@protonmail.com>
LemmyNet · Nov 28, 2023 · 69a3a63 · 69a3a63
1 parent aafcfaf
commit 69a3a63
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/src/server/middleware.ts b/src/server/middleware.ts
@@ -16,12 +16,11 @@ export function setDefaultCsp({
     `default-src 'self';
      manifest-src *;
      connect-src *;
-     img-src * data:;
+     img-src * data: blob:;
      script-src 'self' 'nonce-${res.locals.cspNonce}';
      style-src 'self' 'unsafe-inline';
      form-action 'self';
      base-uri 'self';
-     blob: 'self';
      frame-src *;
      media-src * data:`.replace(/\s+/g, " "),
   );