You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@couchdb.apache.org by kx...@apache.org on 2016/03/14 05:18:36 UTC

chttpd commit: updated refs/heads/master to bdcaad9

Repository: couchdb-chttpd
Updated Branches:
  refs/heads/master a0e52bd00 -> bdcaad96c


Backport CSP fix from couchdb-couch

Needed for the ace editor icons
See https://github.com/apache/couchdb-couch/pull/2

This closes #68


Project: http://git-wip-us.apache.org/repos/asf/couchdb-chttpd/repo
Commit: http://git-wip-us.apache.org/repos/asf/couchdb-chttpd/commit/bdcaad96
Tree: http://git-wip-us.apache.org/repos/asf/couchdb-chttpd/tree/bdcaad96
Diff: http://git-wip-us.apache.org/repos/asf/couchdb-chttpd/diff/bdcaad96

Branch: refs/heads/master
Commit: bdcaad96ce7a65f94e901ca9865317ea9f4f1027
Parents: a0e52bd
Author: Robert Kowalski <ro...@apache.org>
Authored: Thu Sep 3 16:10:20 2015 +0200
Committer: Alexander Shorin <kx...@apache.org>
Committed: Mon Mar 14 07:17:07 2016 +0300

----------------------------------------------------------------------
 src/chttpd_misc.erl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/couchdb-chttpd/blob/bdcaad96/src/chttpd_misc.erl
----------------------------------------------------------------------
diff --git a/src/chttpd_misc.erl b/src/chttpd_misc.erl
index ca0a033..a9c7051 100644
--- a/src/chttpd_misc.erl
+++ b/src/chttpd_misc.erl
@@ -84,7 +84,7 @@ handle_utils_dir_req(Req, _) ->
     send_method_not_allowed(Req, "GET,HEAD").
 
 maybe_add_csp_headers(Headers, "true") ->
-    DefaultValues = "default-src 'self'; img-src 'self'; font-src 'self'; "
+    DefaultValues = "default-src 'self'; img-src 'self' data:; font-src 'self'; "
                     "script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline';",
     Value = config:get("csp", "header_value", DefaultValues),
     [{"Content-Security-Policy", Value} | Headers];