cloud/music_library
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow loading img blobs in csp directives

Browse Source
This commit is contained in:
Claudio Ortolina
2026-03-13 14:47:35 +00:00
parent cf95d6e89b
commit 145c5c288c
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/music_library_web/router.ex
+2 -2
View File
@@ -18,7 +18,7 @@ defmodule MusicLibraryWeb.Router do
"; script-src 'self' 'unsafe-inline'#{@dev_origins}" <> "; script-src 'self' 'unsafe-inline'#{@dev_origins}" <>
"; style-src 'self' 'unsafe-inline' https://rsms.me#{@dev_origins}" <> "; style-src 'self' 'unsafe-inline' https://rsms.me#{@dev_origins}" <>
"; font-src 'self' https://rsms.me" <> "; font-src 'self' https://rsms.me" <>
"; img-src 'self' data: #{@img_origins}" <> "; img-src 'self' data: blob: #{@img_origins}" <>
"; connect-src 'self'#{@dev_origins}" <> "; connect-src 'self'#{@dev_origins}" <>
"; frame-ancestors 'self'" <> "; frame-ancestors 'self'" <>
"; base-uri 'self'" "; base-uri 'self'"
@@ -186,7 +186,7 @@ defmodule MusicLibraryWeb.Router do
"; script-src 'self' 'nonce-#{nonce}'" <> "; script-src 'self' 'nonce-#{nonce}'" <>
"; style-src 'self' 'unsafe-inline' 'nonce-#{nonce}' https://rsms.me" <> "; style-src 'self' 'unsafe-inline' 'nonce-#{nonce}' https://rsms.me" <>
"; font-src 'self' data: https://rsms.me" <> "; font-src 'self' data: https://rsms.me" <>
"; img-src 'self' data: 'nonce-#{nonce}' #{@img_origins}" <> "; img-src 'self' data: blob: 'nonce-#{nonce}' #{@img_origins}" <>
"; connect-src 'self'" <> "; connect-src 'self'" <>
"; frame-ancestors 'self'" <> "; frame-ancestors 'self'" <>
"; base-uri 'self'" "; base-uri 'self'"