Roundcube 1.6.5 Loading the image violates the following Content Security Policy

Discussion in 'General' started by Arape, Jun 5, 2026 at 8:58 AM.

Tags:
  1. Arape

    Arape New Member

    Hi all! I have upgraded my roundcube 3 days ago. Since than the images does not show in the emails
    I got error:

    Loading the image '<URL>' violates the following Content Security Policy directive: "img-src 'self' data:". The action has been blocked.

    I have tried:
    /etc/apache2/conf-enabled/roundcube.conf
    Header always set Content-Security-Policy "img-src 'self' data: http: https:;"

    /etc/roundcube/config.inc.php
    $config['csp_img_src'] = "'self' data: http: https:";
    $config['content_security_policy'] = "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: http: https:; style-src 'self' 'unsafe-inline';";
    $config['show_images'] = 1;

    /etc/roundcube/htaccess
    Header always set Content-Security-Policy "img-src 'self' data: http: https:;"

    Still nothing. Did anyone has the same error?
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    You do not say what operating system and what version is running on that host. You do not say what version of ISPConfig is used. You do not say what was version of Roundcube before and after the upgrade.
    How did you do the upgrade?
    It may well be ISPConfig supports only the version of Roundcube that comes with the version of operating system you are using.
    Does it help if you do ispconfig_update.sh --force and let it reconfigure services when it asks?
     

Share This Page