diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php index ccfb86eae..74aa5fd1e 100644 --- a/lib/Controller/PageController.php +++ b/lib/Controller/PageController.php @@ -111,6 +111,8 @@ private function addCsp($response) { $csp->addAllowedConnectDomain('https://api.mapbox.com'); $csp->addAllowedConnectDomain('https://events.mapbox.com'); $csp->addAllowedConnectDomain('https://graphhopper.com'); + + $csp->addAllowedChildSrcDomain("blob:"); // allow connections to custom routing engines $urlKeys = [ 'osrmBikeURL',