[Libreoffice-commits] online.git: wsd/FileServer.cpp
Henry Castro (via logerrit)
logerrit at kemper.freedesktop.org
Sun Sep 29 14:03:02 UTC 2019
wsd/FileServer.cpp | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit f0661b2e5875534669422586c3ee40b699c28d7f
Author: Henry Castro <hcastro at collabora.com>
AuthorDate: Tue Feb 26 12:40:40 2019 -0400
Commit: Andras Timar <andras.timar at collabora.com>
CommitDate: Sun Sep 29 16:01:22 2019 +0200
wsd: include 'self' to CSP object-src
Change-Id: I5696a6ef6184aaf1acb5be43f489c30825306143
diff --git a/wsd/FileServer.cpp b/wsd/FileServer.cpp
index 01e73cb79..3d1766fba 100644
--- a/wsd/FileServer.cpp
+++ b/wsd/FileServer.cpp
@@ -702,7 +702,7 @@ void FileServerRequestHandler::preprocessFile(const HTTPRequest& request, Poco::
"script-src 'unsafe-inline' 'self'; "
"style-src 'self' 'unsafe-inline'; "
"font-src 'self' data:; "
- "object-src blob:; ";
+ "object-src 'self' blob:; ";
// Frame ancestors: Allow loolwsd host, wopi host and anything configured.
std::string configFrameAncestor = config.getString("net.frame_ancestors", "");
More information about the Libreoffice-commits
mailing list