[fix] add aws to allowed image sources

Leantime · May 25, 2024 · b29c801 · b29c801
1 parent aa1726e
commit b29c801
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Core/Middleware/InitialHeaders.php b/app/Core/Middleware/InitialHeaders.php
@@ -27,7 +27,7 @@ public function handle(IncomingRequest $request, Closure $next): Response
             "base-uri 'self';",
             "script-src 'self' 'unsafe-inline' unpkg.com",
             "font-src 'self'  data:",
-            "img-src 'self' *.leantime.io data: blob:",
+            "img-src 'self' *.leantime.io *.amazonaws.com data: blob:",
             "frame-src 'self' *.google.com *.microsoft.com *.live.com",
             "frame-ancestors 'self' *.google.com *.microsoft.com *.live.com",
         ];