Content Security Policy fixes. Add blob: protocol to img-src and media-src sources. Add data: and mediastream: protocols to media-src.

This commit is contained in:
Geoff Greer
2016-04-20 16:36:40 -07:00
parent 6b317804bc
commit d20dccb27a

View File

@@ -1,7 +1,7 @@
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="default-src *; img-src data: *; script-src 'self'; style-src 'self' 'unsafe-inline';">
<meta http-equiv="Content-Security-Policy" content="default-src *; img-src blob: data: *; script-src 'self'; style-src 'self' 'unsafe-inline'; media-src blob: data: mediastream: *;">
<script src="index.js"></script>
</head>
<body tabindex="-1">