From 0e2e95972d5d5cdb124cb6e9f78bcc3b0f89e2b2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Julius=20H=C3=A4rtl?= Date: Fri, 21 Aug 2020 16:39:19 +0200 Subject: Fix CSP detection with newer nextcloud versions MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Julius Härtl --- lib/Controller/FederationController.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'lib') diff --git a/lib/Controller/FederationController.php b/lib/Controller/FederationController.php index 1eb4b6c7..6ec1409d 100644 --- a/lib/Controller/FederationController.php +++ b/lib/Controller/FederationController.php @@ -62,9 +62,11 @@ class FederationController extends OCSController { * @NoCSRFRequired */ public function index() { - return new DataResponse([ + $response = new DataResponse([ 'wopi_url' => $this->config->getAppValue('richdocuments', 'wopi_url') ]); + $response->setHeaders(['X-Frame-Options' => 'ALLOW']); + return $response; } /** -- cgit v1.2.3