浏览代码

Enforce https for githubusercontent.com

Jordi Boggiano 7 年之前
父节点
当前提交
77514f900c
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      app/config/config_prod.yml

+ 1 - 1
app/config/config_prod.yml

@@ -95,7 +95,7 @@ nelmio_security:
             img-src:
             img-src:
                 - 'self'
                 - 'self'
                 - 'https://www.gravatar.com/'
                 - 'https://www.gravatar.com/'
-                - '*.githubusercontent.com'
+                - 'https://*.githubusercontent.com'
                 - 'https://raw.github.com/'
                 - 'https://raw.github.com/'
                 - 'https://github.com/'
                 - 'https://github.com/'
                 - 'https://gitlab.com/'
                 - 'https://gitlab.com/'