fix(helmet): add githubassets.com to img-src CSP

VChet · Oct 10, 2020 · fde5008 · fde5008
1 parent a8dc3a6
commit fde5008
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/common.js b/common.js
@@ -93,6 +93,7 @@ function addExpressMiddleware(app) {
           "'self'",
           "data:",
           "https://raw.githubusercontent.com",
+          "https://github.githubassets.com",
           "https://www.google-analytics.com"
         ],
         "style-src": ["'self'", "'unsafe-inline'"],