Dotclear


Ignore:
Timestamp:
08/18/16 18:28:27 (9 years ago)
Author:
franck <carnet.franck.paul@…>
Branch:
2.10
Message:

Cope with external sources used in editor's iframe to preview public external content (Youtube video, Flickr images, …)

File:
1 edited

Legend:

Unmodified
Added
Removed
  • inc/admin/lib.dc.page.php

    r3307 r3319  
    119119                    $csp['img-src'] .= ' '.parse_url($core->media->root_url,PHP_URL_HOST); 
    120120               } 
     121               # Allow everything in iframe (used by editors to preview public content) 
     122               $csp['child-src'] = "*"; 
    121123 
    122124               # --BEHAVIOR-- adminPageHTTPHeaderCSP 
Note: See TracChangeset for help on using the changeset viewer.

Sites map