View Issue Details

IDProjectCategoryView StatusLast Update
0025465mantisbtattachmentspublic2024-09-13 20:39
Reporteratrol Assigned Tocproensa  
PrioritynormalSeverityminorReproducibilityN/A
Status closedResolutionfixed 
Target Version2.20.0Fixed in Version2.20.0 
Summary0025465: Dropzone preview does not work
Description

When dropping a jpg-file to dropzone I get an error message on browser console

Refused to load 
data:image/jpeg;base64,/9j/4S...H//Z because it does not appear in the img-src directive of the Content Security Policy.
TagsNo tags attached.

Relationships

has duplicate 0020874 closeddregad Content Security Policy blocked embedded images added by Chrome Extension 
related to 0034589 closeddregad CSP img-src has a duplicate 'self' value 

Activities

There are no notes attached to this issue.

Related Changesets

MantisBT: master 9efa27c9

2019-02-09 16:27

cproensa

Committer: atrol


Details Diff
Add CSP header data for Dropzone

Add CSP header data for Dropzone thumbnails img sources.

Fixes: 0025465
Affected Issues
0025465
mod - core/http_api.php Diff File