From 35382583dbd0fd9920bc9df1f04363b12fcec657 Mon Sep 17 00:00:00 2001
From: Frederic Guillot <fred@kanboard.net>
Date: Sat, 14 Feb 2015 16:30:32 -0500
Subject: Allow remote images for markdown content

---
 app/Controller/Base.php | 2 +-
 app/Controller/Task.php | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

(limited to 'app')

diff --git a/app/Controller/Base.php b/app/Controller/Base.php
index f7ebdbab..548fdb40 100644
--- a/app/Controller/Base.php
+++ b/app/Controller/Base.php
@@ -143,7 +143,7 @@ abstract class Base
     private function sendHeaders($action)
     {
         // HTTP secure headers
-        $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => "'self' data:"));
+        $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => '*'));
         $this->response->nosniff();
         $this->response->xss();
 
diff --git a/app/Controller/Task.php b/app/Controller/Task.php
index 0789e8eb..e561d5f7 100644
--- a/app/Controller/Task.php
+++ b/app/Controller/Task.php
@@ -3,7 +3,6 @@
 namespace Controller;
 
 use Model\Project as ProjectModel;
-use Model\Task as TaskModel;
 
 /**
  * Task controller
-- 
cgit v1.2.3