mirror of
https://git.anonymousland.org/anonymousland/synapse.git
synced 2025-02-24 02:19:53 -05:00

IE11 doesn't support Content-Security-Policy but it has support for a non-standard X-Content-Security-Policy header, which only supports the sandbox directive. This prevents script execution, so it at least offers some protection against media repo-based attacks. Signed-off-by: Denis Kasak <dkasak@termina.org.uk>