conjoon/extjs-app-webmail

fix: background image urls are loaded although images are not allowed

Closed this issue · 1 comments

ThorstenSuckow commented
fix: background image urls are loaded although images are not allowed
ThorstenSuckow commented

A test with

<div style="height:600px;width:800px;background-image:url(&quot;https://www.conjoon.org/img/screens/3.png&quot;);">Hello World</div>

does not show the bg-image and blocks it as expected:

Refused to load the image 'https://www.conjoon.org/img/screens/3.png' because it violates the following Content Security Policy directive: "img-src data: 'self'".