Also allow data: urls for fonts.

11 years ago · 38f8105c2e
1 changed files with 1 additions and 1 deletions
--- a/server.conf.in
+++ b/server.conf.in
@ -109,7 +109,7 @@ serverRealm = local
				@@ -109,7 +109,7 @@ serverRealm = local
 ;   style-src 'self' 'unsafe-inline';
 ;   img-src 'self' data: blob:;
 ;   connect-src 'self' wss://server:port/ws blob:;
-;   font-src 'self' blob;
+;   font-src 'self' data: blob:;
 ;contentSecurityPolicy =
 ; Content-Security-Policy-Report-Only HTTP response header value. Use this
 ; to test your CSP before putting it into production.