Changeset 3599:1bea61af9270 for inc/admin/lib.dc.page.php

Timestamp:

11/11/17 16:23:50 (8 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

2.12

Message:

Add  http:// protocol before media.dotaddict.org for csp_admin_img, fixes #2257

File:

• inc/admin/lib.dc.page.php (modified) (1 diff)

inc/admin/lib.dc.page.php

@@ -119 +119 @@
                     $csp_prefix."'self' 'unsafe-inline'".$csp_suffix;
                $csp['img-src'] = $core->blog->settings->system->csp_admin_img ?:
-                    $csp_prefix."'self' data: media.dotaddict.org blob:";
+                    $csp_prefix."'self' data: http://media.dotaddict.org blob:";
 
                # Cope with blog post preview (via public URL in iframe)