Changeset 3921:1258fad22246
- Timestamp:
- 11/10/18 14:25:37 (7 years ago)
- Branch:
- default
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
inc/admin/lib.dc.page.php
r3920 r3921 106 106 // SQlite Clearbricks driver does not allow using single quote at beginning or end of a field value 107 107 // so we have to use neutral values (localhost and 127.0.0.1) for some CSP directives 108 $csp_prefix = $core->con-> driver() == 'sqlite' ? 'localhost ' : ''; // Hack for SQlite Clearbricks driver109 $csp_suffix = $core->con-> driver() == 'sqlite' ? ' 127.0.0.1' : ''; // Hack for SQlite Clearbricks driver108 $csp_prefix = $core->con->syntax() == 'sqlite' ? 'localhost ' : ''; // Hack for SQlite Clearbricks syntax 109 $csp_suffix = $core->con->syntax() == 'sqlite' ? ' 127.0.0.1' : ''; // Hack for SQlite Clearbricks syntax 110 110 111 111 $csp['default-src'] = $core->blog->settings->system->csp_admin_default ?: … … 127 127 if (!is_null($core->media)) { 128 128 $csp['img-src'] .= ' ' . parse_url($core->media->root_url, PHP_URL_HOST); 129 } elseif (!is_null($core->blog->host)) { 130 // Let's try with the blog URL 131 $csp['img-src'] .= ' ' . parse_url($core->blog->host, PHP_URL_HOST); 129 132 } 130 133 # Allow everything in iframe (used by editors to preview public content)
Note: See TracChangeset
for help on using the changeset viewer.