mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Allow loading of external media ressources

This commit is contained in:
Lukas Reschke 2013-04-24 16:45:51 +02:00
parent ff6fb0906b
commit 4f96d7fb85
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config/config.sample.php
View File

@ -146,7 +146,7 @@ $CONFIG = array(
"remember_login_cookie_lifetime" => 60*60*24*15, "remember_login_cookie_lifetime" => 60*60*24*15,
/* Custom CSP policy, changing this will overwrite the standard policy */ /* Custom CSP policy, changing this will overwrite the standard policy */
"custom_csp_policy" => "default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src *; img-src *; font-src 'self' data:", "custom_csp_policy" => "default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src *; img-src *; font-src 'self' data:; media-src *",
/* The directory where the user data is stored, default to data in the owncloud /* The directory where the user data is stored, default to data in the owncloud
* directory. The sqlite database is also stored here, when sqlite is used. * directory. The sqlite database is also stored here, when sqlite is used.

3
lib/template.php
View File

@ -198,7 +198,8 @@ class OC_Template{
.'style-src \'self\' \'unsafe-inline\'; ' .'style-src \'self\' \'unsafe-inline\'; '
.'frame-src *; ' .'frame-src *; '
.'img-src *; ' .'img-src *; '
.'font-src \'self\' data:'); .'font-src \'self\' data:; '
.'media-src *');
header('Content-Security-Policy:'.$policy); // Standard header('Content-Security-Policy:'.$policy); // Standard
$this->findTemplate($name); $this->findTemplate($name);