From 96983c62aeeafbfa33dba8f9e0b905f0689c10dc Mon Sep 17 00:00:00 2001
From: gravel <qsj4di+aybgdjbxur7e8@sharklasers.com>
Date: Tue, 14 Mar 2023 12:43:21 +0100
Subject: [PATCH] Fix image policy & silence warnings

---
 sites/+components/page-head.php       | 2 +-
 sites/+components/tbl_communities.php | 5 +++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/sites/+components/page-head.php b/sites/+components/page-head.php
index 4b78f97..b21795c 100644
--- a/sites/+components/page-head.php
+++ b/sites/+components/page-head.php
@@ -4,7 +4,7 @@
 <meta 
     http-equiv="Content-Security-Policy" 
     content="
-        script-src 'self'; img-src 'self'; connect-src 'self'; font-src 'none';
+        script-src 'self'; img-src 'self' data:; connect-src 'self'; font-src 'none';
         object-src 'none'; media-src 'none'; form-action 'none'; base-uri 'self';
     "
 >
\ No newline at end of file
diff --git a/sites/+components/tbl_communities.php b/sites/+components/tbl_communities.php
index 3f33948..15fe638 100644
--- a/sites/+components/tbl_communities.php
+++ b/sites/+components/tbl_communities.php
@@ -53,10 +53,11 @@
 		$hostname = explode("/", $hostname)[0];
 
 		// Escape external input.
+		// Ternaries prevent passing null-equal strings, which produce warnings.
 		$id = htmlspecialchars($id);
-		$language = htmlspecialchars($room->language);
+		$language = $room->language ? htmlspecialchars($room->language) : "";
 		$name = htmlspecialchars($room->name);
-		$desc = htmlspecialchars($room->description);
+		$desc = $room->description ? htmlspecialchars($room->description) : "";
 		$users = htmlspecialchars($room->active_users);
 		$preview_link = htmlspecialchars($room->preview_link);
 		$join_link = htmlspecialchars($room->join_link);