CSP error about audios

[libasys]

Please add some more info on your environment and your operating system on your PC!
Thanks

[szepeviktor]

Windows Prof. 7 64 bit
Google Chrome 44

I Think the violated img-src 'self' is in ownCloud.

[libasys]

I think it could be a problem with win7 and chrome, cause i added this line on the pagecontroller to prevent such a behaviour!
https://github.com/libasys/audios/blob/master/controller/pagecontroller.php#L54
Have you same problems using the app with Firefox on Win7?

[szepeviktor]

Yes, I have.

This is the header: default-src 'none';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self';font-src 'self';connect-src 'self';media-src 'self';frame-src 'self'.

[libasys]

Still this problem exists with ownCloud 8.1.1?

[szepeviktor]

Yes. Now the message ends: ("img-src https://qupdate.net").

[v1r0x]

For me, adding this line to the index() in the pagecontroller fixed it:

$csp->addAllowedImageDomain('data:');

[szepeviktor]

Yes, that seems to be OK.