Allow remote images for markdown content

This commit is contained in:
Frederic Guillot 2015-02-14 16:30:32 -05:00
parent 5fd4e290c5
commit 35382583db
4 changed files with 15 additions and 2 deletions

View File

@ -143,7 +143,7 @@ abstract class Base
private function sendHeaders($action)
{
// HTTP secure headers
$this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => "'self' data:"));
$this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => '*'));
$this->response->nosniff();
$this->response->xss();

View File

@ -3,7 +3,6 @@
namespace Controller;
use Model\Project as ProjectModel;
use Model\Task as TaskModel;
/**
* Task controller

View File

@ -1149,6 +1149,13 @@ a.task-board-nobody {
margin-bottom: 10px;
margin-left: 20px;
}
.markdown img {
display: block;
max-width: 80%;
margin-top: 10px;
}
/* listing block */
.listing {
border-radius: 4px;

View File

@ -55,3 +55,10 @@
margin-bottom: 10px;
margin-left: 20px;
}
.markdown img {
display: block;
max-width: 80%;
margin-top: 10px;
}