Change for insecure images over http

See https://github.com/the-djmaze/snappymail/issues/16#issuecomment-707962963
This commit is contained in:
djmaze 2020-10-15 13:01:14 +02:00
parent 0528bcf911
commit 0dc093b35b
2 changed files with 2 additions and 1 deletions

View file

@ -23,7 +23,7 @@
define('APP_USE_APC_CACHE', true);
// "img-src https:" is allowed due to remote images in e-mails
define('APP_DEFAULT_CSP', "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'");
define('APP_DEFAULT_CSP', "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https: http:; style-src 'self' 'unsafe-inline'");
date_default_timezone_set('UTC');