diff options
| author | Henry Castro <hcastro@collabora.com> | 2019-02-26 12:40:40 -0400 |
|---|---|---|
| committer | Andras Timar <andras.timar@collabora.com> | 2019-09-29 16:01:22 +0200 |
| commit | f0661b2e5875534669422586c3ee40b699c28d7f (patch) | |
| tree | 6ebb687d572370c5063ece47fe5e9ae174bf913b /wsd/FileServer.cpp | |
| parent | slide sorter: Let's not use red to indicate the drop area. (diff) | |
| download | online-f0661b2e5875534669422586c3ee40b699c28d7f.tar.gz online-f0661b2e5875534669422586c3ee40b699c28d7f.zip | |
wsd: include 'self' to CSP object-src
Change-Id: I5696a6ef6184aaf1acb5be43f489c30825306143
Diffstat (limited to 'wsd/FileServer.cpp')
| -rw-r--r-- | wsd/FileServer.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/wsd/FileServer.cpp b/wsd/FileServer.cpp index 01e73cb79e..3d1766fba4 100644 --- a/wsd/FileServer.cpp +++ b/wsd/FileServer.cpp @@ -702,7 +702,7 @@ void FileServerRequestHandler::preprocessFile(const HTTPRequest& request, Poco:: "script-src 'unsafe-inline' 'self'; " "style-src 'self' 'unsafe-inline'; " "font-src 'self' data:; " - "object-src blob:; "; + "object-src 'self' blob:; "; // Frame ancestors: Allow loolwsd host, wopi host and anything configured. std::string configFrameAncestor = config.getString("net.frame_ancestors", ""); |