Uploads: Sandbox them in the CSP.

2020-04-15 12:05:22 +02:00 · 2020-04-15 12:05:22 +02:00 · a4afeed426
parent 8cf4e1619e
commit a4afeed426
1 changed files with 1 additions and 0 deletions
--- a/lib/pleroma/plugs/uploaded_media.ex
+++ b/lib/pleroma/plugs/uploaded_media.ex
@ -41,6 +41,7 @@ defmodule Pleroma.Plugs.UploadedMedia do
        conn ->
          conn
      end
+      |> merge_resp_headers([{"content-security-policy", "sandbox"}])

    config = Pleroma.Config.get(Pleroma.Upload)