From 34b0c18bdd27f87a9f287cd3aac60a3ca781923f Mon Sep 17 00:00:00 2001
From: Kimmo Puputti <git@kimmo.kpuputti.fi>
Date: Thu, 8 Feb 2018 13:40:10 +0200
Subject: [PATCH] Allow data URL for fonts

---
 server/csp.js | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/server/csp.js b/server/csp.js
index 58d1d57b..c99b201d 100644
--- a/server/csp.js
+++ b/server/csp.js
@@ -20,6 +20,7 @@ const sentryClientEnabled = !!process.env.REACT_APP_PUBLIC_SENTRY_DSN;
 module.exports = (reportUri, enforceSsl, reportOnly) => {
   const self = "'self'";
   const inline = "'unsafe-inline'";
+  const data = 'data:';
   const sharetribeApi = config.sdk.baseUrl;
   const sharetribeAssets = 'https://assets-sharetribecom.sharetribe.com/';
   const imgix = '*.imgix.net/';
@@ -41,7 +42,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
 
   const imgSrc = [
     self,
-    'data:',
+    data,
     imgix,
     loremPixel,
     placeholder,
@@ -53,7 +54,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
 
   const connectSrc = [self, sharetribeApi, googleMaps];
 
-  const fontSrc = [self, sharetribeAssets, googleStaticFonts];
+  const fontSrc = [self, data, sharetribeAssets, googleStaticFonts];
 
   const frameSrc = [self, stripeJs];