search

defendtheweb / hackthis.co.uk

HackThis!!
http://www.hackthis.co.uk
Other
46 stars 55 forks source link

Allowing use of 'data:' for pictures #190

Closed Amaterasu27 closed 8 years ago

Amaterasu27 commented 8 years ago

As we can see in console, there is a problem with a script trying to injecting a picture using 'data:' format The script is this one : https://github.com/HackThis/hackthis.co.uk/blob/master/html/files/js/favcounter.js

The problem is from CSP rule : 'img-src *' which disallow the use of 'data:' format. With this new rule, the script should works as he has to !

lwward commented 8 years ago

This is the same issue that is affecting the graph on IRC -> stats