fix: 放宽CSP策略，允许http和blob图片源

2026-05-17 13:07:43 +08:00
parent bfbfdccdea
commit c3b309413e
1 changed files with 2 additions and 2 deletions
@@ -35,8 +35,8 @@ app.use(helmet({
      scriptSrc: ["'self'", "'unsafe-inline'"],
      scriptSrcAttr: ["'unsafe-inline'"],
      styleSrc: ["'self'", "'unsafe-inline'", "https:"],
-      imgSrc: ["'self'", "data:", "https:"],
+      imgSrc: ["'self'", "data:", "https:", "http:", "blob:"],
-      connectSrc: ["'self'", "https:"],
+      connectSrc: ["'self'", "https:", "http:"],
    },
  },
 }));