2FA QR doesn't show up due to CSP error

Relevant stackoverflow fix: https://stackoverflow.com/questions/18447970/content-security-policy-data-not-working-for-base64-images-in-chrome-28
2025-10-12 15:35:15 +00:00 · 2018-09-03 08:19:38 +03:00
parent bae40e2cbc
commit 52f8b24041
1 changed files with 2 additions and 2 deletions
--- a/app/Http/Middleware/SecureHeaders.php
+++ b/app/Http/Middleware/SecureHeaders.php
@@ -57,7 +57,7 @@ class SecureHeaders
            "form-action 'self'",
            "font-src 'self'",
            "connect-src 'self'",
-            "img-src 'self'",
+            "img-src 'self' data:",
        ];

        $featurePolicies = [
@@ -85,4 +85,4 @@ class SecureHeaders

        return $response;
    }
-}
+}