Solve a problem with inline displaying of file attachments.

firefly-iii · Oct 7, 2018 · 8088c28 · 8088c28
1 parent 2ec310d
commit 8088c28
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php
@@ -37,7 +37,6 @@ class SecureHeaders
      *
      * @param \Illuminate\Http\Request $request
      * @param \Closure                 $next
-     * @param string|null              $guard
      *
      * @return mixed
      */
@@ -51,6 +50,7 @@ public function handle(Request $request, Closure $next)
         }
         $csp = [
             "default-src 'none'",
+            "object-src 'self'",
             sprintf("script-src 'self' 'unsafe-eval' 'unsafe-inline' %s", $google),
             "style-src 'self' 'unsafe-inline'",
             "base-uri 'self'",