chore: image allow "data:" in csp (#19728)

This commit is contained in:
Joel 2025-05-15 14:13:49 +08:00 committed by GitHub
parent ff0feaf34e
commit bd7094b9f5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -37,7 +37,7 @@ export function middleware(request: NextRequest) {
style-src 'self' 'unsafe-inline' ${scheme_source} ${whiteList};
worker-src 'self' ${scheme_source} ${csp} ${whiteList};
media-src 'self' ${scheme_source} ${csp} ${whiteList};
img-src *;
img-src * data:;
font-src 'self';
object-src 'none';
base-uri 'self';