From eb1fb1873a5916d992f1c069f7a7b30e4c87d72b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=A9my=20Munsch?= <jeremy.munsch@ldc.fr>
Date: Sun, 12 Jun 2022 16:44:40 +0200
Subject: [PATCH] Fix security Headers

---
 app/Http/Middleware/SecureHeaders.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php
index 2b9f1fd..633ec2b 100644
--- a/app/Http/Middleware/SecureHeaders.php
+++ b/app/Http/Middleware/SecureHeaders.php
@@ -45,8 +45,8 @@ class SecureHeaders
         $cspPolicies = [
             "default-src 'none';",
             // * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html
-            "connect-src 'self';",
-            "img-src * data:;",
+            "connect-src 'self' blob:;",
+            "img-src * data: blob:;",
             "frame-src https://www.youtube.com;",
             "font-src 'self' data:;",
             // ! Using CKEditor wiill must have unsafe-inline style