web/cryptpad
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

add suggested CSP types for media tags

Browse Source
This commit is contained in:
ansuz 2017-06-15 14:42:27 +02:00
parent cd5705b3f3
commit 2a262555ed
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
config.example.js
View File

@ -33,9 +33,9 @@ module.exports = {
* it is recommended that you configure these fields to match the * it is recommended that you configure these fields to match the
* domain which will serve your CryptPad instance. * domain which will serve your CryptPad instance.
*/ */
"child-src 'self' *", "child-src 'self' blob: *",
"media-src *", "media-src * blob:",
/* this allows connections over secure or insecure websockets /* this allows connections over secure or insecure websockets
if you are deploying to production, you'll probably want to remove if you are deploying to production, you'll probably want to remove