sergiotarxz/Pleroma
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Uploads: Sandbox them in the CSP.

Browse Source
This commit is contained in:
lain 2020-04-15 12:05:22 +02:00 committed by rinpatch
parent 8cf4e1619e
commit a4afeed426
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
lib/pleroma/plugs/uploaded_media.ex
View File

@ -41,6 +41,7 @@ def call(%{request_path: <<"/", @path, "/", file::binary>>} = conn, opts) do
conn ->
conn
end
|> merge_resp_headers([{"content-security-policy", "sandbox"}])
config = Pleroma.Config.get(Pleroma.Upload)