add child-src as a default src for CSP

hivewallet · Sep 16, 2015 · f89e46f · f89e46f
1 parent 88778e7
commit f89e46f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/server/express.js b/server/express.js
@@ -26,6 +26,7 @@ module.exports = function (){
     }
     app.use(helmet.csp({
       'default-src': ["'self'"],
+      'child-src': ["'self'", "blob:"],
       'connect-src': [
         "'self'", "blob:",
         'api.bitcoinaverage.com', 'chain.so', // tickers