mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #16766 from nextcloud/fix/frame-src/no-nonce 

frame-src doesn't respect the nonce attribute
This commit is contained in:
Roeland Jago Douma 2019-08-19 09:22:31 +02:00 committed by GitHub
parent 8514a2a436 c4cafae884
commit e6c225a3f3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/public/AppFramework/Http/EmptyContentSecurityPolicy.php
View File

@ -494,9 +494,6 @@ class EmptyContentSecurityPolicy {
if(!empty($this->allowedFrameDomains)) { if(!empty($this->allowedFrameDomains)) {
$policy .= 'frame-src '; $policy .= 'frame-src ';
if(is_string($this->useJsNonce)) {
$policy .= '\'nonce-' . base64_encode($this->useJsNonce) . '\' ';
}
$policy .= implode(' ', $this->allowedFrameDomains); $policy .= implode(' ', $this->allowedFrameDomains);
$policy .= ';'; $policy .= ';';
} }