Remove "data:" from CSP header.

This hasn't been needed for a long time.
2025-01-17 12:29:39 +01:00
parent 3ad12b6d58
commit 947ce61d3c
1 changed files with 1 additions and 1 deletions
@@ -94,7 +94,7 @@ func cspHeader(w http.ResponseWriter, connect string) {
 		c = "connect-src " + connect + " ws: wss: 'self'; "
 	}
 	w.Header().Add("Content-Security-Policy",
-		c+"img-src data: 'self'; media-src blob: 'self'; script-src 'unsafe-eval' 'self'; default-src 'self'")
+		c+"img-src 'self'; media-src blob: 'self'; script-src 'unsafe-eval' 'self'; default-src 'self'")

 	// Make browser stop sending referrer information
 	w.Header().Add("Referrer-Policy", "no-referrer")