another try on #385 - replace sabres restrictive CSP with what we do in boot.php

2016-05-25 14:18:41 +02:00
parent c37eaff263
commit 929d33fb22
2 changed files with 4 additions and 0 deletions
--- a/Zotlabs/Storage/Browser.php
+++ b/Zotlabs/Storage/Browser.php
@@ -256,6 +256,7 @@ class Browser extends DAV\Browser\Plugin {
 				$func($a);
 			}
 		}
+		$this->server->httpResponse->setHeader('Content-Security-Policy', "script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'");
 		construct_page($a);
 	}