Matrix-Mirrors/anonymousland-synapse
1
0
Fork 0
mirror of https://git.anonymousland.org/anonymousland/synapse.git synced 2024-12-27 07:49:26 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add 'sandbox' to CSP for media repo (#4284)

Browse Source 
* Add 'sandbox' to the CSP for media repo

* Changelog
This commit is contained in:
David Baker 2018-12-10 17:05:02 +00:00 committed by Richard van der Hoff
parent 128294d3e5
commit 1c0051114a
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
changelog.d/4284.bugfix Normal file
View File

@ -0,0 +1 @@
Add 'sandbox' to CSP for media reprository

1
synapse/rest/media/v1/download_resource.py
View File

@ -48,6 +48,7 @@ class DownloadResource(Resource):
set_cors_headers(request) set_cors_headers(request)
request.setHeader( request.setHeader(
b"Content-Security-Policy", b"Content-Security-Policy",
b"sandbox;"
b" default-src 'none';" b" default-src 'none';"
b" script-src 'none';" b" script-src 'none';"
b" plugin-types application/pdf;" b" plugin-types application/pdf;"