Whitelist all domains for image

Fixes #63 and #60
owncloud · Sep 18, 2015 · b46d2cf · b46d2cf
1 parent c8d63e4
commit b46d2cf
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/controller/displaycontroller.php b/controller/displaycontroller.php
@@ -48,6 +48,7 @@ public function showPdfViewer() {
 		$policy = new ContentSecurityPolicy();
 		$policy->addAllowedChildSrcDomain('\'self\'');
 		$policy->addAllowedFontDomain('data:');
+		$policy->addAllowedImageDomain('*');
 		$response->setContentSecurityPolicy($policy);
 
 		return $response;

diff --git a/tests/unit/controller/displaycontrollertest.php b/tests/unit/controller/displaycontrollertest.php
@@ -54,6 +54,7 @@ public function testShowPdfViewer() {
 		$policy = new ContentSecurityPolicy();
 		$policy->addAllowedChildSrcDomain('\'self\'');
 		$policy->addAllowedFontDomain('data:');
+		$policy->addAllowedImageDomain('*');
 		$expectedResponse->setContentSecurityPolicy($policy);
 
 		$this->assertEquals($expectedResponse, $this->controller->showPdfViewer());