MirrorHub/synapse
0
0
Fork 1
mirror of https://mau.dev/maunium/synapse.git synced 2024-06-30 08:28:19 +02:00
Code Issues Projects Releases Wiki Activity

Merge pull request #1021 from matrix-org/erikj/mediasecurity_policy

Browse source 
Set `Content-Security-Policy` on media repo
This commit is contained in:
Erik Johnston 2016-08-17 17:22:43 +01:00 committed by GitHub
parent 0d7cef0943 0af9e1a637
commit 2a0d8f8219
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
synapse/rest/media/v1/download_resource.py
View file

@ -45,6 +45,7 @@ class DownloadResource(Resource):
@request_handler()
@defer.inlineCallbacks
def _async_render_GET(self, request):
request.setHeader("Content-Security-Policy", "sandbox")
server_name, media_id, name = parse_media_id(request)
if server_name == self.server_name:
yield self._respond_local_file(request, media_id, name)