yetangitu/nextcloud-apps
1
0
Fork 0
mirror of https://github.com/Yetangitu/owncloud-apps.git synced 2025-10-02 14:49:17 +02:00
Code Issues Releases Wiki Activity

files_reader: added allowedFrameDomain for compatibility with older browsers which do not support the child-src CSP directive

Browse source
This commit is contained in:
frankdelange 2015-09-07 15:23:08 +02:00
parent 49b3914585
commit c4f16e6404
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
files_reader/controller/displaycontroller.php
View file

@ -46,7 +46,9 @@ class DisplayController extends Controller {
$csp = new ContentSecurityPolicy();
$csp->addAllowedChildSrcDomain('\'self\'');
$csp->addAllowedFrameDomain('\'self\'');
$csp->addAllowedStyleDomain('blob:');
$csp->addAllowedImageDomain('blob:');
$response->setContentSecurityPolicy($csp);
return $response;