From dd239ddb5900fd4e0599f57d834c1aa409bd6d77 Mon Sep 17 00:00:00 2001
From: Frederic Guillot <fred@kanboard.net>
Date: Sun, 23 Aug 2015 10:47:12 -0400
Subject: Make screenshot feature compatible with Firefox 40

---
 app/Controller/Base.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'app')

diff --git a/app/Controller/Base.php b/app/Controller/Base.php
index bfcbfd2a..480976b0 100644
--- a/app/Controller/Base.php
+++ b/app/Controller/Base.php
@@ -80,7 +80,7 @@ abstract class Base extends \Core\Base
     private function sendHeaders($action)
     {
         // HTTP secure headers
-        $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => '*'));
+        $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => '* data:'));
         $this->response->nosniff();
         $this->response->xss();
 
-- 
cgit v1.2.3