fix: image source for the avatars

pelotech · Jan 20, 2024 · bc9c247 · bc9c247
1 parent 576c4ba
commit bc9c247
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/app-config.yaml b/app-config.yaml
@@ -19,6 +19,12 @@ backend:
     # host: 127.0.0.1
   csp:
     connect-src: ["'self'", 'http:', 'https:']
+    img-src:
+      [
+        "'self'",
+        'data:',
+        'https://avatars.githubusercontent.com'
+      ]
     # Content-Security-Policy directives follow the Helmet format: https://helmetjs.github.io/#reference
     # Default Helmet Content-Security-Policy values can be removed by setting the key to false
   cors: