Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/server.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/apps
diff options
context:
space:
mode:
authorRoeland Jago Douma <rullzer@users.noreply.github.com>2020-01-08 12:31:51 +0300
committerGitHub <noreply@github.com>2020-01-08 12:31:51 +0300
commit62b4de04b1014ed5901065ced1c4ac8c56a29cb9 (patch)
treedc76506a6505c2630f19e89ffa8e4ddf65bd4f6b /apps
parent676b162e379de91fab8e745f56c53171c529e7ff (diff)
parent916e3185d8f0886ba9589166cd780ce2edeb708e (diff)
Merge pull request #18581 from nextcloud/backport/18140/stable16
[stable16] Allow inline styles for theming images
Diffstat (limited to 'apps')
-rw-r--r--apps/theming/lib/Controller/ThemingController.php3
1 files changed, 3 insertions, 0 deletions
diff --git a/apps/theming/lib/Controller/ThemingController.php b/apps/theming/lib/Controller/ThemingController.php
index cc8af2cae3e..c68f3aab38a 100644
--- a/apps/theming/lib/Controller/ThemingController.php
+++ b/apps/theming/lib/Controller/ThemingController.php
@@ -383,6 +383,9 @@ class ThemingController extends Controller {
}
$response = new FileDisplayResponse($file);
+ $csp = new Http\ContentSecurityPolicy();
+ $csp->allowInlineStyle();
+ $response->setContentSecurityPolicy($csp);
$response->cacheFor(3600);
$response->addHeader('Content-Type', $this->config->getAppValue($this->appName, $key . 'Mime', ''));
$response->addHeader('Content-Disposition', 'attachment; filename="' . $key . '"');