📝 docs: add data: to CSP to load local svg

welpo · Apr 28, 2023 · 3b22e6b · 3b22e6b
1 parent 9512bbb
commit 3b22e6b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/theme.toml b/theme.toml
@@ -44,7 +44,7 @@ menu = [
 # Default config, allows for https remote images and embedding YouTube and Vimeo content.
 # This configuration (along with the right webserver settings) gets an A+ in Mozilla's Observatory: https://observatory.mozilla.org
 allowed_domains = [
-    { directive = "img-src", domains = ["'self'", "https://*"] },
+    { directive = "img-src", domains = ["'self'", "https://*", "data:"] },
     { directive = "script-src", domains = ["'self'"] },
     { directive = "style-src", domains = ["'self'"] },
     { directive = "frame-src", domains = ["player.vimeo.com", "https://www.youtube-nocookie.com"] },