HangfireIO / HangfireIO/Hangfire
Empty favicon requires insecure CSP
Open
- Dominant language
- C#
- Stars
- 10.1k
- Forks
- 1.8k
- Avg merge
- 1h 19m
- Merged PRs (30d)
- 1
Description
The empty favicon (introduced in https://github.com/HangfireIO/Hangfire/commit/b1d84b249333467dfc93e095ce777b1e1e3e7620) requires a CSP allowing the data scheme that is considered insecure (`img-src 'self' data:;` instead of `img-src 'self';`).
Is there a way to customize the favicon to avoid this issue?
Contributor guide
Assessment
This issue has not been assessed yet.