Merge pull request #126 from sumocoders/csp-radiobutton-icon

Sander · web-flow · commit df54649ca78f · 2023-03-15T17:46:54.000+01:00
Allow "img-src: data:" in CSP for bootstrap icons
diff --git a/src/DependencyInjection/Configuration.php b/src/DependencyInjection/Configuration.php
@@ -24,6 +24,10 @@ public function getConfigTreeBuilder(): TreeBuilder
                         'font-src' => [
                             "'self'",
                         ],
+                        'img-src' => [
+                            "'self'",
+                            "data:", // Bootstrap icons
+                        ],
                         'child-src' => [
                             "'none'", // Block all iframes
                         ],
