[Fix bug 746203] Whitelist HTTPS gravatars.

macoseika · Apr 19, 2012 · a9a32d2 · a9a32d2
1 parent d17c931
commit a9a32d2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/settings/default.py b/settings/default.py
@@ -207,7 +207,8 @@
 # Django-CSP
 CSP_IMG_SRC = ("'self'", 'http://statse.webtrendslive.com',
                'https://statse.webtrendslive.com',
-               'http://www.gravatar.com',)
+               'http://www.gravatar.com',
+               'https://secure.gravatar.com',)
 CSP_SCRIPT_SRC = ("'self'", 'http://statse.webtrendslive.com',
                   'https://statse.webtrendslive.com',
                   'https://browserid.org',)