Comment on Roundcube Webmail: SVG feImage bypasses image blocking to track email opensComments−jszymborski7moToo bad CORS doesn't fix this. It would be awesome to be able to sandbox a page completely.−JimDabell7moYou can use CSP for this: Content-Security-Policy: img-src 'self';
Comments
Too bad CORS doesn't fix this. It would be awesome to be able to sandbox a page completely.
You can use CSP for this: