Merge pull request #12 from techulus/develop

Update CSP config
techulus · Feb 9, 2024 · c3de147 · c3de147
2 parents b4a9841 + 13e7f20
commit c3de147
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/apps/web/next.config.js b/apps/web/next.config.js
@@ -3,7 +3,7 @@ const withBundleAnalyzer = require("@next/bundle-analyzer")({});
 const ContentSecurityPolicy = `
   script-src 'self' 'unsafe-eval' 'unsafe-inline' *;
   style-src 'self' data: 'unsafe-inline' maxcdn.bootstrapcdn.com;
-  img-src 'self' * data:;
+  img-src 'self' * data: blob:;
   font-src 'self' data: maxcdn.bootstrapcdn.com;
   connect-src 'self' wss: *.supabase.co *.changes.page;
   worker-src 'self' blob:;