From 0317ae0cb6b428bf01d48d1e9e3c4d00a07385dc Mon Sep 17 00:00:00 2001
From: Jannik Stehle <jannik.stehle@gmail.com>
Date: Tue, 4 Jun 2024 09:47:58 +0200
Subject: [PATCH] fix: opening pdf files

Adds `blob:` as possible entry for `frame-src` to allow opening pdf files, since those are being embedded as a blob.
---
 dev/docker/ocis/csp.yaml | 1 +
 tests/drone/csp.yaml     | 1 +
 2 files changed, 2 insertions(+)

diff --git a/dev/docker/ocis/csp.yaml b/dev/docker/ocis/csp.yaml
index 7a4ceff43be..e9a6ce3b097 100644
--- a/dev/docker/ocis/csp.yaml
+++ b/dev/docker/ocis/csp.yaml
@@ -11,6 +11,7 @@ directives:
     - '''self'''
   frame-src:
     - '''self'''
+    - 'blob:'
     - 'https://embed.diagrams.net/'
     # In contrast to bash and docker the default is given after the | character
     - 'https://${ONLYOFFICE_DOMAIN|host.docker.internal:9981}/'
diff --git a/tests/drone/csp.yaml b/tests/drone/csp.yaml
index 51f85f897de..30fb4bd1ace 100644
--- a/tests/drone/csp.yaml
+++ b/tests/drone/csp.yaml
@@ -13,6 +13,7 @@ directives:
     - '''self'''
   frame-src:
     - '''self'''
+    - 'blob:'
     - 'https://embed.diagrams.net/'
     # In contrast to bash and docker the default is given after the | character
     - 'https://${ONLYOFFICE_DOMAIN|onlyoffice:443}/'