From c56523bebd83cadf24382dffc7187e4893085a9f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Thu, 20 Mar 2014 10:18:42 +0100 Subject: [PATCH] Allow styles from ourselves in CSP MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Čihař --- libraries/Header.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libraries/Header.class.php b/libraries/Header.class.php index 8f418623e8..486afe2a11 100644 --- a/libraries/Header.class.php +++ b/libraries/Header.class.php @@ -477,7 +477,7 @@ class PMA_Header . "script-src 'self' 'unsafe-inline' 'unsafe-eval'" . ($use_captcha ? 'https://www.google.com ' : ' ') . ";" - . "style-src 'unsafe-inline' " + . "style-src 'self' 'unsafe-inline' " . ($use_captcha ? 'https://www.google.com ' : ' ') . $GLOBALS['cfg']['CSPAllow'] . ";"