From ebc8487c7d8b810bc3c7dfe2e542a7a668242f31 Mon Sep 17 00:00:00 2001 From: Julen Landa Alustiza Date: Aug 10 2019 07:35:18 +0000 Subject: CSP: relax img-src policy --- diff --git a/pagure/default_config.py b/pagure/default_config.py index 5128ff8..9693eab 100644 --- a/pagure/default_config.py +++ b/pagure/default_config.py @@ -619,4 +619,5 @@ CSP_HEADERS = ( "style-src 'self' '{nonce_style}'; " "object-src 'none';" "base-uri 'self';" + "img-src 'self' https:;" )