[Libreoffice-commits] online.git: wsd/FileServer.cpp

[Henry Castro (via logerrit)]

 wsd/FileServer.cpp |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit f0661b2e5875534669422586c3ee40b699c28d7f
Author:     Henry Castro <hcastro at collabora.com>
AuthorDate: Tue Feb 26 12:40:40 2019 -0400
Commit:     Andras Timar <andras.timar at collabora.com>
CommitDate: Sun Sep 29 16:01:22 2019 +0200

    wsd: include 'self' to CSP object-src
    
    Change-Id: I5696a6ef6184aaf1acb5be43f489c30825306143

diff --git a/wsd/FileServer.cpp b/wsd/FileServer.cpp
index 01e73cb79..3d1766fba 100644
--- a/wsd/FileServer.cpp
+++ b/wsd/FileServer.cpp
@@ -702,7 +702,7 @@ void FileServerRequestHandler::preprocessFile(const HTTPRequest& request, Poco::
            "script-src 'unsafe-inline' 'self'; "
            "style-src 'self' 'unsafe-inline'; "
            "font-src 'self' data:; "
-           "object-src blob:; ";
+           "object-src 'self' blob:; ";
 
     // Frame ancestors: Allow loolwsd host, wopi host and anything configured.
     std::string configFrameAncestor = config.getString("net.frame_ancestors", "");