diff options
author | Frederic Guillot <fred@kanboard.net> | 2015-02-14 16:30:32 -0500 |
---|---|---|
committer | Frederic Guillot <fred@kanboard.net> | 2015-02-14 16:30:57 -0500 |
commit | 35382583dbd0fd9920bc9df1f04363b12fcec657 (patch) | |
tree | aff38f8fd289d0b1157a8d2e0657d551cda51607 /app/Controller | |
parent | 5fd4e290c5e0cc4e721a2c68489529831882f435 (diff) |
Allow remote images for markdown content
Diffstat (limited to 'app/Controller')
-rw-r--r-- | app/Controller/Base.php | 2 | ||||
-rw-r--r-- | app/Controller/Task.php | 1 |
2 files changed, 1 insertions, 2 deletions
diff --git a/app/Controller/Base.php b/app/Controller/Base.php index f7ebdbab..548fdb40 100644 --- a/app/Controller/Base.php +++ b/app/Controller/Base.php @@ -143,7 +143,7 @@ abstract class Base private function sendHeaders($action) { // HTTP secure headers - $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => "'self' data:")); + $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => '*')); $this->response->nosniff(); $this->response->xss(); diff --git a/app/Controller/Task.php b/app/Controller/Task.php index 0789e8eb..e561d5f7 100644 --- a/app/Controller/Task.php +++ b/app/Controller/Task.php @@ -3,7 +3,6 @@ namespace Controller; use Model\Project as ProjectModel; -use Model\Task as TaskModel; /** * Task controller |