Skip to content
Snippets Groups Projects
Commit 3b576c5f authored by Robin Appelman's avatar Robin Appelman
Browse files

Merge pull request #3111 from owncloud/csp-audio 

Allow loading of external media ressources
parents a34350c8 4f96d7fb
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
config/config.sample.php
+ 1
− 1
View file @ 3b576c5f
...@@ -146,7 +146,7 @@ $CONFIG = array( ...@@ -146,7 +146,7 @@ $CONFIG = array(
"remember_login_cookie_lifetime" => 60*60*24*15, "remember_login_cookie_lifetime" => 60*60*24*15,
/* Custom CSP policy, changing this will overwrite the standard policy */ /* Custom CSP policy, changing this will overwrite the standard policy */
"custom_csp_policy" => "default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src *; img-src *; font-src 'self' data:", "custom_csp_policy" => "default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src *; img-src *; font-src 'self' data:; media-src *",
/* Enable/disable X-Frame-Restriction */ /* Enable/disable X-Frame-Restriction */
/* HIGH SECURITY RISK IF DISABLED*/ /* HIGH SECURITY RISK IF DISABLED*/
......
lib/template.php
+ 2
− 1
View file @ 3b576c5f
...@@ -203,7 +203,8 @@ class OC_Template{ ...@@ -203,7 +203,8 @@ class OC_Template{
.'style-src \'self\' \'unsafe-inline\'; ' .'style-src \'self\' \'unsafe-inline\'; '
.'frame-src *; ' .'frame-src *; '
.'img-src *; ' .'img-src *; '
.'font-src \'self\' data:'); .'font-src \'self\' data:; '
.'media-src *');
header('Content-Security-Policy:'.$policy); // Standard header('Content-Security-Policy:'.$policy); // Standard
$this->findTemplate($name); $this->findTemplate($name);
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment