yep
this huge config param was splitted
please check here
https://builds.apache.org/view/M-R/view/OpenMeetings/job/openmeetings/site/openmeetings-server/GeneralConfiguration.html

On Fri, 22 May 2020 at 21:40, Peter Dähn <da...@vcrp.de> wrote:

> Hi together,
>
> after latest update of OM to Revision aa09332 I get following error:
>
>
> *Refused to load the image 'https://HOST/portrait' because it violates the
> following Content Security Policy directive: "img-src 'self' 'self' data:
> data:". *
> Changing in csp header config to
>
>
> *default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self'
> 'unsafe-inline' 'unsafe-eval'; img-src 'self' HOST data:;
> X-Content-Type-Options ''; *
> and restart om doesn't change this behavior.
>
> Do I do something wrong or is it a bug?
>
> Greetings Peter
>


-- 
Best regards,
Maxim

Reply via email to