Nemcio/Gogs
1
0
Fork 0
mirror of https://github.com/gogs/gogs.git synced 2026-01-24 16:19:17 +01:00
Code Issues Packages Projects Releases Wiki Activity

attachment: set CSP header in the serving endpoint (#6926)

Browse Source
This commit is contained in:
Joe Chen
2022-05-03 17:51:28 +08:00
parent 2a8f561c64
commit bc77440b30
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
internal/cmd/web.go
View File

@@ -314,6 +314,7 @@ func runWeb(c *cli.Context) error {
}
defer fr.Close()
c.Header().Set("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox")
c.Header().Set("Cache-Control", "public,max-age=86400")
c.Header().Set("Content-Disposition", fmt.Sprintf(`inline; filename="%s"`, attach.Name))