Matrix-Mirrors/anonymousland-synapse
1
0
Fork 0
mirror of https://git.anonymousland.org/anonymousland/synapse.git synced 2025-05-08 07:24:56 -04:00
Code Issues Projects Releases Packages Wiki Activity

Set CORs headers on responses from the media repo

Browse source
This commit is contained in:
Mark Haines 2016-11-02 11:29:25 +00:00
parent dc155f4c2c
commit b1c27975d0
3 changed files with 22 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

3
synapse/rest/media/v1/download_resource.py
View file

@ -15,7 +15,7 @@
from ._base import parse_media_id, respond_with_file, respond_404
from twisted.web.resource import Resource
from synapse.http.server import request_handler
from synapse.http.server import request_handler, set_cors_headers
from twisted.web.server import NOT_DONE_YET
from twisted.internet import defer
@ -45,6 +45,7 @@ class DownloadResource(Resource):
@request_handler()
@defer.inlineCallbacks
def _async_render_GET(self, request):
set_cors_headers(request)
request.setHeader(
"Content-Security-Policy",
"default-src 'none';"