mirror of
https://github.com/miniflux/v2.git
synced 2025-08-31 18:31:01 +00:00
Allow images with data URLs
Only URLs with a mime-type image/* are allowed
This commit is contained in:
parent
9a9a271b1f
commit
864dd9f219
4 changed files with 34 additions and 3 deletions
|
@ -32,7 +32,7 @@ func TestResponseHasCommonHeaders(t *testing.T) {
|
|||
"X-XSS-Protection": "1; mode=block",
|
||||
"X-Content-Type-Options": "nosniff",
|
||||
"X-Frame-Options": "DENY",
|
||||
"Content-Security-Policy": "default-src 'self'; img-src *; media-src *; frame-src *",
|
||||
"Content-Security-Policy": "default-src 'self'; img-src * data:; media-src *; frame-src *",
|
||||
}
|
||||
|
||||
for header, expected := range headers {
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue