You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by st...@apache.org on 2016/09/30 00:48:53 UTC
cordova-app-hello-world git commit: CB-11938 updated csp to include
content: for img-src
Repository: cordova-app-hello-world
Updated Branches:
refs/heads/master 27919ad09 -> 451d94fe9
CB-11938 updated csp to include content: for img-src
Project: http://git-wip-us.apache.org/repos/asf/cordova-app-hello-world/repo
Commit: http://git-wip-us.apache.org/repos/asf/cordova-app-hello-world/commit/451d94fe
Tree: http://git-wip-us.apache.org/repos/asf/cordova-app-hello-world/tree/451d94fe
Diff: http://git-wip-us.apache.org/repos/asf/cordova-app-hello-world/diff/451d94fe
Branch: refs/heads/master
Commit: 451d94fe9550038adbc3baedd7b42f9baf422eb4
Parents: 27919ad
Author: Steve Gill <st...@gmail.com>
Authored: Thu Sep 29 17:25:33 2016 -0700
Committer: Steve Gill <st...@gmail.com>
Committed: Thu Sep 29 17:34:12 2016 -0700
----------------------------------------------------------------------
template_src/www/index.html | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/cordova-app-hello-world/blob/451d94fe/template_src/www/index.html
----------------------------------------------------------------------
diff --git a/template_src/www/index.html b/template_src/www/index.html
index 646f9cb..095e93b 100644
--- a/template_src/www/index.html
+++ b/template_src/www/index.html
@@ -28,7 +28,7 @@
* Disables use of inline scripts in order to mitigate risk of XSS vulnerabilities. To change this:
* Enable inline JS: add 'unsafe-inline' to default-src
-->
- <meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap: https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src *">
+ <meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap: https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src *; img-src 'self' data: content:;">
<meta name="format-detection" content="telephone=no">
<meta name="msapplication-tap-highlight" content="no">
<meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width">
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org