From 52f8b24041905f2fa6f6e111130b53852bfe79af Mon Sep 17 00:00:00 2001
From: HamuZ HamuZ <550499+hamuz@users.noreply.github.com>
Date: Mon, 3 Sep 2018 08:19:38 +0300
Subject: [PATCH] 2FA QR doesn't show up due to CSP error

Relevant stackoverflow fix:
https://stackoverflow.com/questions/18447970/content-security-policy-data-not-working-for-base64-images-in-chrome-28
---
 app/Http/Middleware/SecureHeaders.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php
index f958484a3b..5a7ff83eb9 100644
--- a/app/Http/Middleware/SecureHeaders.php
+++ b/app/Http/Middleware/SecureHeaders.php
@@ -57,7 +57,7 @@ class SecureHeaders
             "form-action 'self'",
             "font-src 'self'",
             "connect-src 'self'",
-            "img-src 'self'",
+            "img-src 'self' data:",
         ];
 
         $featurePolicies = [
@@ -85,4 +85,4 @@ class SecureHeaders
 
         return $response;
     }
-}
\ No newline at end of file
+}