Changeset 3278:e50055d05f36 for inc

Timestamp:

07/21/16 12:46:32 (9 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Add media.dotaddict.org to the CSP white list for img-src (used for thumbnails of themes available on DotAddict?), thanks Annie Strohem for reporting this missing item

File:

• inc/admin/lib.dc.page.php (modified) (1 diff)

inc/admin/lib.dc.page.php

@@ -105 +105 @@
                     "script-src 'self' 'unsafe-inline' 'unsafe-eval' ; ".
                     "style-src 'self' 'unsafe-inline' ; ".
-                    "img-src 'self' data:".
+                    "img-src 'self' data: media.dotaddict.org".
                     (version_compare(phpversion(),'5.4','>=') ? " ; report-uri ".DC_ADMIN_URL."csp_report.php" : '')
                );