forked from MirrorHub/synapse
Add 'sandbox' to CSP for media repo (#4284)
* Add 'sandbox' to the CSP for media repo * Changelog
This commit is contained in:
parent
128294d3e5
commit
1c0051114a
1
changelog.d/4284.bugfix
Normal file
1
changelog.d/4284.bugfix
Normal file
|
@ -0,0 +1 @@
|
|||
Add 'sandbox' to CSP for media reprository
|
|
@ -48,7 +48,8 @@ class DownloadResource(Resource):
|
|||
set_cors_headers(request)
|
||||
request.setHeader(
|
||||
b"Content-Security-Policy",
|
||||
b"default-src 'none';"
|
||||
b"sandbox;"
|
||||
b" default-src 'none';"
|
||||
b" script-src 'none';"
|
||||
b" plugin-types application/pdf;"
|
||||
b" style-src 'unsafe-inline';"
|
||||
|
|
Loading…
Reference in a new issue