Mercurial > prosody-modules

diff mod_http_upload_external/share.php @ 2977:7036e82f83f5

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_http_upload_external: share.php example: Add CSP headers
author Matthew Wild <mwild1@gmail.com>
date Mon, 02 Apr 2018 10:52:32 +0100
parents 67d6510c5f49
children 9480ca61294d
line wrap: on
line diff
--- a/mod_http_upload_external/share.php	Sun Apr 01 23:24:33 2018 +0200
+++ b/mod_http_upload_external/share.php	Mon Apr 02 10:52:32 2018 +0100
@@ -104,6 +104,9 @@
 		header('Content-Disposition: attachment');
 		header('Content-Type: application/octet-stream');
 		header('Content-Length: '.filesize($store_file_name));
+		header('Content-Security-Policy: "default-src \'none\'"');
+		header('X-Content-Security-Policy: "default-src \'none\'"');
+		header('X-WebKit-CSP: "default-src 'none'"');
 		if($request_method !== 'HEAD') {
 			readfile($store_file_name);
 		}