http_security_plug.ex: Fix non-proxied media

This commit is contained in:
Haelwenn (lanodan) Monnier 2020-05-29 17:17:02 +02:00
parent 9848978109
commit da1e31fae3
No known key found for this signature in database
GPG key ID: D5B7A8E43C997DEE

View file

@ -75,7 +75,7 @@ defp csp_string do
sources = get_proxy_and_attachment_sources()
{[img_src, sources], [media_src, sources]}
else
{img_src, media_src}
{img_src <> " https:", media_src <> " https:"}
end
connect_src = ["connect-src 'self' ", static_url, ?\s, websocket_url]