CSP: Hotfix connect-src to allow static file access for PDF editor

2026-07-16 10:23:44 +02:00
parent 08c376a459
commit 2660dfe1bc
1 changed files with 1 additions and 1 deletions
@@ -314,7 +314,7 @@ class SecurityMiddleware(MiddlewareMixin):
            'object-src': ["'none'"],
            'frame-src': ['{static}'],
            'style-src': ["{static}", "{media}"],
-            'connect-src': ["{dynamic}", "{media}"],
+            'connect-src': ["{static}", "{dynamic}", "{media}"],
            'img-src': ["{static}", "{media}", "data:"],
            'font-src': ["{static}"],
            'media-src': ["{static}", "data:"],