poslop/palette
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

fix #171: CSP-compliant image preview (data: URL instead of blob:) #186

Merged
fen merged 1 commits from fix-171 into dev 2026-09-10 16:42:15 +00:00
Conversation 0 Commits 1 Files Changed 1
+15 -6
fen commented 2026-09-10 16:38:29 +00:00
Collaborator
Copy Link
Copy Source

Replaces URL.createObjectURL blob: preview with FileReader data: URL in internal/web/static/new.js. img-src data: is CSP-allowed. go build/test pass.

Replaces URL.createObjectURL blob: preview with FileReader data: URL in internal/web/static/new.js. img-src data: is CSP-allowed. go build/test pass.
fen added 1 commit 2026-09-10 16:38:29 +00:00
fix #171: use FileReader data: URL for image preview (CSP blocks blob:)
CI / docker (pull_request) Skipped
Details
CI / test (pull_request) Successful in 39s
Details
f947415b23
fen merged commit 368620eb15 into dev 2026-09-10 16:42:15 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Assigned
Owner assigned: agent may pick this up
 Critical
critical severity (pentest triage)
 High
high severity (pentest triage)
 In Progress
Agent actively working on this
 Low
low severity (pentest triage)
 Medium
medium severity (pentest triage)
 Owner Review
Blocked on a human decision or design call - poslop must review before work proceeds
 QA
Implementation done, awaiting independent review agent
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
fen poslop
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: poslop/palette#186