From 980d555500a93ec299f27257a444b386049b2a22 Mon Sep 17 00:00:00 2001
From: ansuz <ansuz@transitiontech.ca>
Date: Thu, 13 Jul 2017 11:19:45 +0200
Subject: [PATCH] enable img-src blob: in /pad/

---
 config.example.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config.example.js b/config.example.js
index 8493244e1..081f2a04b 100644
--- a/config.example.js
+++ b/config.example.js
@@ -67,7 +67,7 @@ module.exports = {
          "connect-src 'self' ws: wss:",
 
         // (insecure remote) images are included by users of the wysiwyg who embed photos in their pads
-        "img-src *",
+        "img-src * blob:",
     ].join('; '),
 
     httpPort: 3000,