Add data: uris

[gdhnz]

Not sure if this is possible or not but is there a way to allow additional schemes? Either by an additional class method or via a json config.

Refused to load data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7 because it does not appear in the img-src directive of the Content Security Policy.

[paragonie-scott]

This has always been possible from JSON, but in the next release you can just do this:

$cspBuilder->setDataAllowed('img-src', true);

[gdhnz]

Is there documentation on how to do it via JSON? I couldn't seem to find anything hence why I raised the issue.

[paragonie-scott]

It's in the example:

...

    "img-src": {
        "self": true,
        "data": true
    },
...

[gdhnz]

I'm blind. Sorry.

[paragonie-scott]

No problem at all. Thank you for reporting the issue in the first place, it made me aware of a usability oversight that I hadn't considered previously, so it made CSP-Builder better. :)