search

outline / rich-markdown-editor

The open source React and Prosemirror based markdown editor that powers Outline. Want to try it out? Create an account:
https://www.getoutline.com
BSD 3-Clause "New" or "Revised" License
2.87k stars 588 forks source link

Suggestion to not use base64'd version for images/icons #501

Open drishit96 opened 3 years ago

drishit96 commented 3 years ago

Currently, the icon for dragging a checkbox up and down is rendered using a base64'd version of the image (here).

The icon itself isn't the problem but sites using CSP have to allow data: in their rule to allow this icon to load and allowing the entire host just for this image is risky as mentioned here.