need to allow media src for le memes

This commit is contained in:
Ted Unangst 2023-03-15 17:01:30 -04:00
parent 2eb5b9d3c0
commit 31a9ea6a08
1 changed files with 1 additions and 1 deletions

2
web.go
View File

@ -2461,7 +2461,7 @@ func bgmonitor() {
func addcspheaders(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Security-Policy", "default-src 'none'; script-src 'self'; connect-src 'self'; style-src 'self'; img-src 'self'; report-uri /csp-violation")
w.Header().Set("Content-Security-Policy", "default-src 'none'; script-src 'self'; connect-src 'self'; style-src 'self'; img-src 'self'; media-src 'self'; report-uri /csp-violation")
next.ServeHTTP(w, r)
})
}