Fixed image import.

Ylian Saint-Hilaire committed Apr 21, 2021 at 17:13 UTC e38bd251d266d1de4cb1a4cde8968bbeb48d1a94
2 files changed +11 -1
out.txt
+10
@@ -13,3 +13,13 @@ MeshCentral v0.8.16, Hybrid (LAN + WAN) mode.
13 MeshCentral Intel(R) AMT server running on central.mesh.meshcentral.com:4433.
14 MeshCentral HTTPS server running on central.mesh.meshcentral.com:443.
15 Server Ctrl-C exit...
16 +MeshCentral HTTP redirection server running on port 80.
17 +MeshCentral v0.8.16, Hybrid (LAN + WAN) mode.
18 +MeshCentral Intel(R) AMT server running on central.mesh.meshcentral.com:4433.
19 +MeshCentral HTTPS server running on central.mesh.meshcentral.com:443.
20 +Server Ctrl-C exit...
21 +MeshCentral HTTP redirection server running on port 80.
22 +MeshCentral v0.8.16, Hybrid (LAN + WAN) mode.
23 +MeshCentral Intel(R) AMT server running on central.mesh.meshcentral.com:4433.
24 +MeshCentral HTTPS server running on central.mesh.meshcentral.com:443.
25 +Server Ctrl-C exit...
webserver.js
+1 -1
@@ -5368,7 +5368,7 @@ module.exports.CreateWebServer = function (parent, db, args, certificates) {
5368 'X-XSS-Protection': '1; mode=block',
5369 'X-Content-Type-Options': 'nosniff',
5370 'Permissions-Policy': 'interest-cohort=()', // Remove Google's FLoC Network
5371 - 'Content-Security-Policy': "default-src 'none'; font-src 'self'; script-src 'self' 'unsafe-inline'" + extraScriptSrc + "; connect-src 'self'" + geourl + selfurl + "; img-src 'self'" + geourl + " data:; style-src 'self' 'unsafe-inline'; frame-src 'self' mcrouter:; media-src 'self'; form-action 'self'"
5371 + 'Content-Security-Policy': "default-src 'none'; font-src 'self'; script-src 'self' 'unsafe-inline'" + extraScriptSrc + "; connect-src 'self'" + geourl + selfurl + "; img-src 'self' blob: data:" + geourl + " data:; style-src 'self' 'unsafe-inline'; frame-src 'self' mcrouter:; media-src 'self'; form-action 'self'"
5372 };
5373 if ((parent.config.settings.allowframing !== true) && (typeof parent.config.settings.allowframing !== 'string')) { headers['X-Frame-Options'] = 'sameorigin'; }
5374 res.set(headers);