fix: update CSP to allow badges to be loaded from shields.io

pact-foundation · Jul 17, 2020 · a87e527 · a87e527
1 parent 22b8c1a
commit a87e527
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/pact_broker/configuration.rb b/lib/pact_broker/configuration.rb
@@ -96,7 +96,7 @@ def self.default_configuration
       config.content_security_policy = {
         script_src: "'self' 'unsafe-inline'",
         style_src: "'self' 'unsafe-inline'",
-        img_src: "'self' data:",
+        img_src: "'self' data: #{URI(config.shields_io_base_url).host}",
         font_src: "'self' data:",
         base_uri: "'self'",
         frame_src: "'self'",