Dotclear

Changeset 3320:15761f7830c5 for inc


Ignore:
Timestamp:
08/18/16 18:28:27 (9 years ago)
Author:
franck <carnet.franck.paul@…>
Branch:
default
source:
6a9ba28a243fd5bafecdf40816fb23563eb4d45f
Message:

Cope with external sources used in editor's iframe to preview public external content (Youtube video, Flickr images, …)

File:
1 edited

Legend:

Unmodified
Added
Removed
  • inc/admin/lib.dc.page.php

    r3313 r3320  
    119119                    $csp['img-src'] .= ' '.parse_url($core->media->root_url,PHP_URL_HOST); 
    120120               } 
     121               # Allow everything in iframe (used by editors to preview public content) 
     122               $csp['child-src'] = "*"; 
    121123 
    122124               # --BEHAVIOR-- adminPageHTTPHeaderCSP 
Note: See TracChangeset for help on using the changeset viewer.

Sites map