Allow remote images for markdown content

2015-02-14 16:30:32 -05:00
parent 5fd4e290c5
commit 35382583db
4 changed files with 15 additions and 2 deletions
--- a/app/Controller/Base.php
+++ b/app/Controller/Base.php
@@ -143,7 +143,7 @@ abstract class Base
    private function sendHeaders($action)
    {
        // HTTP secure headers
-        $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => "'self' data:"));
+        $this->response->csp(array('style-src' => "'self' 'unsafe-inline'", 'img-src' => '*'));
        $this->response->nosniff();
        $this->response->xss();