diff options
Diffstat (limited to 'app')
| -rw-r--r-- | app/Controller/Base.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/Controller/Base.php b/app/Controller/Base.php index bfcbfd2a..480976b0 100644 --- a/app/Controller/Base.php +++ b/app/Controller/Base.php @@ -80,7 +80,7 @@ abstract class Base extends \Core\Base private function sendHeaders($action) { // HTTP secure headers - $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => '*')); + $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => '* data:')); $this->response->nosniff(); $this->response->xss(); |