GNUsocial/gnu-social
4
0
Fork 1
Code Issues Releases Wiki Activity

[PLUGINS][AttachmentShowRelated] Fixed note template error. Fixed if statement.

Browse Source 
[CORE][Controller] Commented CSP out.
This commit is contained in:
Eliseu Amaro
2021-11-23 22:54:49 +00:00
committed by Diogo Peralta Cordeiro
parent 8edaabbabf
commit d8147cbd2d
5 changed files with 16 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
src/Core/Controller.php
View File

@@ -149,14 +149,14 @@ abstract class Controller extends AbstractController implements EventSubscriberI
if ($template !== null) {
$event->setResponse($this->render($template, $this->vars));
// Setting the Content-Security-Policy response header
$policy = "default-src 'self';"
. "script-src 'strict-dynamic' https: http:;"
. "object-src 'none'; base-uri 'none'";
$potential_response = $event->getResponse();
$potential_response->headers->set('Content-Security-Policy', $policy);
$potential_response->headers->set('X-Content-Security-Policy', $policy);
$potential_response->headers->set('X-WebKit-CSP', $policy);
/* // Setting the Content-Security-Policy response header
$policy = "default-src 'self';"
. "script-src 'strict-dynamic' https: http:;"
. "object-src 'none'; base-uri 'none'";
$potential_response = $event->getResponse();
$potential_response->headers->set('Content-Security-Policy', $policy);
$potential_response->headers->set('X-Content-Security-Policy', $policy);
$potential_response->headers->set('X-WebKit-CSP', $policy);*/
break;
} else {