Browse Source

fix contentSecurityPolicy in Server.ts

zahmis 4 years ago
parent
commit
999e736f01
1 changed files with 1 additions and 1 deletions
  1. 1 1
      packages/slackbot-proxy/src/Server.ts

+ 1 - 1
packages/slackbot-proxy/src/Server.ts

@@ -52,7 +52,7 @@ const helmetOptions = isProduction ? {
     directives: {
       defaultSrc: ['\'self\''],
       styleSrc: ['\'self\'', '\'unsafe-inline\''],
-      imgSrc: ['\'self\'', 'data:', 'validator.swagger.io'],
+      imgSrc: ['\'self\'', 'data:', 'validator.swagger.io', 'https://docs.growi.org/'],
       scriptSrc: ['\'self\'', 'https: \'unsafe-inline\''],
     },
   },