diff options
Diffstat (limited to 'app')
| -rw-r--r-- | app/Controllers/statsController.php | 3 | ||||
| -rw-r--r-- | app/FreshRSS.php | 2 |
2 files changed, 2 insertions, 3 deletions
diff --git a/app/Controllers/statsController.php b/app/Controllers/statsController.php index 67b1f80e9..5a7e9b79a 100644 --- a/app/Controllers/statsController.php +++ b/app/Controllers/statsController.php @@ -30,8 +30,7 @@ class FreshRSS_stats_Controller extends FreshRSS_ActionController { $this->_csp([ 'default-src' => "'self'", 'frame-ancestors' => "'none'", - 'img-src' => '* data:', - 'style-src' => "'self' 'unsafe-inline'", + 'img-src' => '* data: blob:', ]); $catDAO = FreshRSS_Factory::createCategoryDao(); diff --git a/app/FreshRSS.php b/app/FreshRSS.php index bff9f1b18..62e91ff95 100644 --- a/app/FreshRSS.php +++ b/app/FreshRSS.php @@ -149,7 +149,7 @@ class FreshRSS extends Minz_FrontController { } public static function preLayout(): void { - header("X-Content-Type-Options: nosniff"); + header('X-Content-Type-Options: nosniff'); FreshRSS_Share::load(join_path(APP_PATH, 'shares.php')); self::loadStylesAndScripts(); |