add google images CDN to img-src CSP (fixes #3516)

This commit is contained in:
Josh Junon 2024-04-30 11:48:00 +02:00
parent 77c5b87d07
commit b350a85e5c
No known key found for this signature in database

View File

@ -62,7 +62,7 @@
"security": { "security": {
"csp": { "csp": {
"default-src": "'self'", "default-src": "'self'",
"img-src": "'self' asset: https://asset.localhost data: tauri://localhost https://avatars.githubusercontent.com https://*.gitbutler.com https://gitbutler-public.s3.amazonaws.com https://*.gravatar.com", "img-src": "'self' asset: https://asset.localhost data: tauri://localhost https://avatars.githubusercontent.com https://*.gitbutler.com https://gitbutler-public.s3.amazonaws.com https://*.gravatar.com https://lh3.googleusercontent.com",
"connect-src": "'self' https://eu.posthog.com https://eu.i.posthog.com https://app.gitbutler.com https://o4504644069687296.ingest.sentry.io ws://localhost:7703 https://github.com https://api.github.com", "connect-src": "'self' https://eu.posthog.com https://eu.i.posthog.com https://app.gitbutler.com https://o4504644069687296.ingest.sentry.io ws://localhost:7703 https://github.com https://api.github.com",
"script-src": "'self' https://eu.posthog.com https://eu.i.posthog.com", "script-src": "'self' https://eu.posthog.com https://eu.i.posthog.com",
"style-src": "'self' 'unsafe-inline'" "style-src": "'self' 'unsafe-inline'"