From 964c6f135794ff6b65c0a9dea6ab7e788cece96b Mon Sep 17 00:00:00 2001 From: Ningsong Shen Date: Tue, 23 Jun 2020 15:17:33 -0400 Subject: [PATCH] fix: update CSP to allow action bar to download notes --- config/application.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/application.rb b/config/application.rb index 754c27ab6..ebbcc7664 100644 --- a/config/application.rb +++ b/config/application.rb @@ -43,7 +43,7 @@ module StandardNotes base_uri: %w('self'), block_all_mixed_content: false, # see http://www.w3.org/TR/mixed-content/ child_src: ["*", "blob:"], - frame_src: ["*", "blob:"], + frame_src: ["*", "blob:", "data:"], connect_src: ["*"], font_src: %w(* 'self'), form_action: %w('self'),