From fde5008ebe3eea2771d00b28c20eccfa56bf1cbe Mon Sep 17 00:00:00 2001 From: VChet <17050347+VChet@users.noreply.github.com> Date: Sat, 10 Oct 2020 17:03:18 +0500 Subject: [PATCH] fix(helmet): add githubassets.com to img-src CSP --- common.js | 1 + 1 file changed, 1 insertion(+) diff --git a/common.js b/common.js index 5391291..054fc01 100644 --- a/common.js +++ b/common.js @@ -93,6 +93,7 @@ function addExpressMiddleware(app) { "'self'", "data:", "https://raw.githubusercontent.com", + "https://github.githubassets.com", "https://www.google-analytics.com" ], "style-src": ["'self'", "'unsafe-inline'"],