docs: add changelog for CSP font-src fix

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Paul Faure
2026-03-03 19:09:29 -05:00
committed by Martin
parent ece1043ca2
commit d8984c4c06

View File

@@ -0,0 +1,5 @@
Bugfix: Fix CSP blocking bundled KaTeX font
The default Content Security Policy blocked the bundled KaTeX math font (used by the md-editor) because it is inlined as a `data:` URI in the Web UI CSS. Added `data:` to the `font-src` directive to resolve the console error on every page load. Users with custom CSP files (`PROXY_CSP_CONFIG_FILE_LOCATION`) will need to add `data:` to their `font-src` directive manually.
https://github.com/owncloud/ocis/pull/12070