hashicorp / go-secure-stdlib

Mozilla Public License 2.0
64 stars 24 forks source link

Fix Default CSP img-src #51

Closed kheina closed 1 year ago

kheina commented 1 year ago

Replaces all instances of data:* with data: to correctly set the img-src policy of the default content-security-policy.

data:* does not correctly allow data:image/png;base64,... type inline images, but data: does

jefferai commented 1 year ago

Tagged as 2.0.6!