Added blob csp rule for xwiki

2025-09-17 07:46:05 +02:00 · 2025-09-17 02:47:01 +02:00
parent d9c527e2e2
commit cc2b9d476f
1 changed files with 3 additions and 1 deletions
--- a/roles/web-app-xwiki/config/main.yml
+++ b/roles/web-app-xwiki/config/main.yml
@@ -24,7 +24,9 @@ features:
  ldap:             false # Just OIDC or LDAP can be enabled
 server:
  csp:
-    whitelist:      {}
+    whitelist:
+      worker-src:
+        - "blob:"
    flags:
      script-src:
        unsafe-eval:    true