diff --git a/reverse-proxy/conf.d.dev/default.conf b/reverse-proxy/conf.d.dev/default.conf index 33481115d..f115d8c4f 100644 --- a/reverse-proxy/conf.d.dev/default.conf +++ b/reverse-proxy/conf.d.dev/default.conf @@ -20,6 +20,6 @@ server { rewrite ^/api/(.*)$ /$1 break; proxy_pass http://api-docs:8080; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' validator.swagger.io; style-src 'self' 'unsafe-inline';" always; + add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' validator.swagger.io data:; style-src 'self' 'unsafe-inline';" always; } } \ No newline at end of file diff --git a/reverse-proxy/conf.d/default.conf b/reverse-proxy/conf.d/default.conf index 91b4dc73e..d3fa4f8db 100644 --- a/reverse-proxy/conf.d/default.conf +++ b/reverse-proxy/conf.d/default.conf @@ -23,7 +23,7 @@ server { rewrite ^/api/(.*)$ /$1 break; proxy_pass http://api-docs:8080; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' validator.swagger.io; style-src 'self' 'unsafe-inline';" always; + add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' validator.swagger.io data:; style-src 'self' 'unsafe-inline';" always; } location / {