Merge pull request #1649 from hamuz/patch-1

2FA QR doesn't show up due to CSP error
2025-11-03 20:55:05 +00:00 · 2018-09-03 07:57:19 +02:00
parent eaf2667abb 52f8b24041
commit 7666147f3c
1 changed files with 2 additions and 2 deletions
--- a/app/Http/Middleware/SecureHeaders.php
+++ b/app/Http/Middleware/SecureHeaders.php
@@ -57,7 +57,7 @@ class SecureHeaders
            "form-action 'self'",
            "font-src 'self'",
            "connect-src 'self'",
-            "img-src 'self'",
+            "img-src 'self' data:",
        ];

        $featurePolicies = [
@@ -85,4 +85,4 @@ class SecureHeaders

        return $response;
    }
-}
+}