Use self csp

Signed-off-by: Corentin Mors <corentin.mors@dashlane.com> Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
nextcloud · Oct 21, 2020 · 86444e2 · 86444e2
1 parent a8b9203
commit 86444e2
Show file tree

Hide file tree

Showing 6 changed files with 18 additions and 18 deletions.
diff --git a/js/photos-2.js b/js/photos-2.js
diff --git a/js/photos-2.js.map b/js/photos-2.js.map
diff --git a/js/photos-main.js b/js/photos-main.js
diff --git a/js/photos-main.js.map b/js/photos-main.js.map
diff --git a/js/photos-service-worker.js.map b/js/photos-service-worker.js.map
diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php
@@ -95,7 +95,7 @@ public function index(): TemplateResponse {
 
 		$policy = new ContentSecurityPolicy();
 		$policy->addAllowedWorkerSrcDomain("'self'");
-		$policy->addAllowedScriptDomain('blob:');
+		$policy->addAllowedScriptDomain("'self'");
 		$response->setContentSecurityPolicy($policy);
 
 		return $response;