diff --git a/src/main/java/org/qortal/arbitrary/ArbitraryDataRenderer.java b/src/main/java/org/qortal/arbitrary/ArbitraryDataRenderer.java index b824e7fd..2e11cb48 100644 --- a/src/main/java/org/qortal/arbitrary/ArbitraryDataRenderer.java +++ b/src/main/java/org/qortal/arbitrary/ArbitraryDataRenderer.java @@ -128,7 +128,7 @@ public class ArbitraryDataRenderer { // Regular file - can be streamed directly File file = new File(filePath); FileInputStream inputStream = new FileInputStream(file); - response.addHeader("Content-Security-Policy", "default-src 'self' 'unsafe-inline'; media-src 'self' blob:"); + response.addHeader("Content-Security-Policy", "default-src 'self'"); response.setContentType(context.getMimeType(filename)); int bytesRead, length = 0; byte[] buffer = new byte[10240];