From fd212aed036a8c4f0b5a649df7525fefbd55ba4a Mon Sep 17 00:00:00 2001 From: "B. Petersen" Date: Fri, 21 Jul 2023 22:46:32 +0200 Subject: [PATCH] webxdc: allow media from blob: and data: --- src/org/thoughtcrime/securesms/WebxdcActivity.java | 1 + 1 file changed, 1 insertion(+) diff --git a/src/org/thoughtcrime/securesms/WebxdcActivity.java b/src/org/thoughtcrime/securesms/WebxdcActivity.java index a000b9dbd..303b68f48 100644 --- a/src/org/thoughtcrime/securesms/WebxdcActivity.java +++ b/src/org/thoughtcrime/securesms/WebxdcActivity.java @@ -260,6 +260,7 @@ public class WebxdcActivity extends WebViewActivity implements DcEventCenter.DcE + "script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: ; " + "connect-src 'self' data: blob: ; " + "img-src 'self' data: blob: ; " + + "media-src 'self' data: blob: ;" + "webrtc 'block' ; " ); headers.put("X-DNS-Prefetch-Control", "off");