see #497 - add img-src self/data: etc

postfixadmin · May 31, 2023 · 1e872d8 · 1e872d8
1 parent 702bb6c
commit 1e872d8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/header.tpl b/templates/header.tpl
@@ -7,7 +7,7 @@
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
 
     {* see https://github.com/postfixadmin/postfixadmin/issues/497 *}
-    <meta http-equiv='Content-Security-Policy' content="default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; "/>
+    <meta http-equiv='Content-Security-Policy' content="default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; "/>
 
     <title>Postfix Admin - {$smarty.server.HTTP_HOST}</title>
     <link rel="shortcut icon" href="{$CONF.theme_favicon}"/>