Reintroduce possibility to use data uri for images

Fixes issue #3862
globaleaks · Dec 11, 2023 · a214b28 · a214b28
1 parent c94494c
commit a214b28
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/backend/globaleaks/handlers/staticfile.py b/backend/globaleaks/handlers/staticfile.py
@@ -36,7 +36,7 @@ def get(self, filename):
                                    b"form-action 'none';"
                                    b"frame-ancestors 'none';"
                                    b"frame-src 'self';"
-                                   b"img-src 'self';"
+                                   b"img-src 'self'; data:"
                                    b"media-src 'self';"
                                    b"script-src 'self' 'sha256-l4srTx31TC+tE2K4jVVCnC9XfHivkiSs/v+DPWccDDM=';"
                                    b"style-src 'self' 'sha256-pru43GdcNLwb4MwzOriCI9/9cKBzE5xeoLWHlKai1As=';")