Add missing CSP

jhass · Jan 4, 2024 · 963ee8a · 963ee8a
1 parent 1f2e92d
commit 963ee8a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/keeweb/lib/Controller/PageController.php b/keeweb/lib/Controller/PageController.php
@@ -137,8 +137,9 @@ private function getCSP() {
 		$csp->addAllowedConnectDomain('https://services.keeweb.info');
 		$csp->addAllowedScriptDomain('https://plugins.keeweb.info');
 		$csp->addAllowedScriptDomain("'unsafe-inline'");
+		$csp->addAllowedScriptDomain("blob:");
 		$csp->addAllowedConnectDomain('https://plugins.keeweb.info');
-        $csp->allowEvalScript(true);
+		$csp->allowEvalScript(true);
 		$csp->allowInlineStyle();
 		return $csp;
 	}