mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Disallow eval on the StrictEvalCSP 

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
This commit is contained in:
Roeland Jago Douma 2018-07-11 21:12:36 +02:00
parent d9aa5ed96d
commit c21cee248c
No known key found for this signature in database
GPG Key ID: F941078878347C0C
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/public/AppFramework/Http/StrictEvalContentSecurityPolicy.php
View File

@ -46,6 +46,6 @@ class StrictEvalContentSecurityPolicy extends ContentSecurityPolicy {
* @since 14.0.0
*/
public function __construct() {
$this->inlineStyleAllowed = false;
$this->evalScriptAllowed = false;
}
}