ui-blob: set CSP just in case
This commit is contained in:
orang tua
92996ac2a6
melakukan
9ca2566972
@ -166,6 +166,9 @@ void cgit_print_blob(const char *hex, char *path, const char *head, int file_onl
|
||||
else
|
||||
ctx.page.mimetype = "text/plain";
|
||||
ctx.page.filename = path;
|
||||
|
||||
html("X-Content-Type-Options: nosniff\n");
|
||||
html("Content-Security-Policy: default-src 'none'\n");
|
||||
cgit_print_http_headers();
|
||||
html_raw(buf, size);
|
||||
free(buf);
|
||||
|
Memuat…
Reference in New Issue
Block a user