mirror of
https://github.com/zulip/zulip.git
synced 2025-11-02 13:03:29 +00:00
This adds a basic Content-Security-Policy for user-uploaded avatars
served by the LOCAL_UPLOADS backend.
I think this is for now an unnecessary follow-up to
d608a9d315, but is worth doing because
we may later change what can be uploaded in the avatars directory.