From 6cd8ce125855457aed89012e4a60fabe12ae3abc Mon Sep 17 00:00:00 2001 From: Simon Eisenmann Date: Mon, 27 Jul 2015 12:32:42 +0200 Subject: [PATCH] Added media-src to CSP example. --- server.conf.in | 1 + 1 file changed, 1 insertion(+) diff --git a/server.conf.in b/server.conf.in index a66af10f..b57031a7 100644 --- a/server.conf.in +++ b/server.conf.in @@ -118,6 +118,7 @@ serverRealm = local ; img-src 'self' data: blob:; ; connect-src 'self' wss://server:port/ws blob:; ; font-src 'self' data: blob:; +; media-src 'self' blob:; ;contentSecurityPolicy = ; Content-Security-Policy-Report-Only HTTP response header value. Use this ; to test your CSP before putting it into production.