# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1522662752 -3600
# Node ID 7036e82f83f56c71f8067c44eb863eb483d4b2b4
# Parent  df86ce6bb0b4ebe6730ff4896299d618159f628e
mod_http_upload_external: share.php example: Add CSP headers

diff -r df86ce6bb0b4 -r 7036e82f83f5 mod_http_upload_external/share.php
--- a/mod_http_upload_external/share.php	Sun Apr 01 23:24:33 2018 +0200
+++ b/mod_http_upload_external/share.php	Mon Apr 02 10:52:32 2018 +0100
@@ -104,6 +104,9 @@
 		header('Content-Disposition: attachment');
 		header('Content-Type: application/octet-stream');
 		header('Content-Length: '.filesize($store_file_name));
+		header('Content-Security-Policy: "default-src \'none\'"');
+		header('X-Content-Security-Policy: "default-src \'none\'"');
+		header('X-WebKit-CSP: "default-src 'none'"');
 		if($request_method !== 'HEAD') {
 			readfile($store_file_name);
 		}