Index: openacs-4/packages/acs-tcl/tcl/security-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/security-procs.tcl,v diff -u -N -r1.126.2.5 -r1.126.2.6 --- openacs-4/packages/acs-tcl/tcl/security-procs.tcl 19 Feb 2019 21:49:44 -0000 1.126.2.5 +++ openacs-4/packages/acs-tcl/tcl/security-procs.tcl 23 Feb 2019 14:31:48 -0000 1.126.2.6 @@ -2627,6 +2627,7 @@ security::csp::require img-src 'self' security::csp::require font-src 'self' security::csp::require base-uri 'self' + security::csp::require connect-src 'self'; # # Some browser (safari, chrome) need "font-src data:", maybe