tileradotorg/synapse
1
0
Fork 0
forked from MirrorHub/synapse
Code Pull requests Activity

Set Referrer-Policy to no-referrer for media (#7009)

Browse source
This commit is contained in:
Dionysis Grigoropoulos 2020-03-23 11:48:28 +02:00 committed by GitHub
parent 477c4f5b1c
commit 96071eea8f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
changelog.d/7009.feature Normal file
View file

@ -0,0 +1 @@
Set `Referrer-Policy` header to `no-referrer` on media downloads.

3
synapse/rest/media/v1/download_resource.py
View file

@ -50,6 +50,9 @@ class DownloadResource(DirectServeResource):
b" media-src 'self';" b" media-src 'self';"
b" object-src 'self';", b" object-src 'self';",
) )
request.setHeader(
b"Referrer-Policy", b"no-referrer",
)
server_name, media_id, name = parse_media_id(request) server_name, media_id, name = parse_media_id(request)
if server_name == self.server_name: if server_name == self.server_name:
await self.media_repo.get_local_media(request, media_id, name) await self.media_repo.get_local_media(request, media_id, name)