Uploads: Sandbox them in the CSP.

4 years ago · 6bc76df287
parent 96eae62995
commit 6bc76df287
1 changed files with 1 additions and 0 deletions
--- a/lib/pleroma/plugs/uploaded_media.ex
+++ b/lib/pleroma/plugs/uploaded_media.ex
@ -41,6 +41,7 @@ defmodule Pleroma.Plugs.UploadedMedia do
        conn ->
          conn
      end
      |> merge_resp_headers([{"content-security-policy", "sandbox"}])
    config = Pleroma.Config.get(Pleroma.Upload)