urlGenerator = $urlGenerator; } /** * @PublicPage * @NoCSRFRequired * * @return TemplateResponse */ public function showReader() { $params = [ 'urlGenerator' => $this->urlGenerator ]; $response = new TemplateResponse($this->appName, 'reader', $params, 'blank'); $csp = new ContentSecurityPolicy(); $csp->addAllowedChildSrcDomain('\'self\''); $csp->addAllowedFrameDomain('\'self\''); $csp->addAllowedStyleDomain('blob:'); $csp->addAllowedImageDomain('blob:'); $response->setContentSecurityPolicy($csp); return $response; } }