diff options
author | Roeland Jago Douma <rullzer@users.noreply.github.com> | 2020-01-08 12:31:51 +0300 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-01-08 12:31:51 +0300 |
commit | 62b4de04b1014ed5901065ced1c4ac8c56a29cb9 (patch) | |
tree | dc76506a6505c2630f19e89ffa8e4ddf65bd4f6b /apps | |
parent | 676b162e379de91fab8e745f56c53171c529e7ff (diff) | |
parent | 916e3185d8f0886ba9589166cd780ce2edeb708e (diff) |
Merge pull request #18581 from nextcloud/backport/18140/stable16
[stable16] Allow inline styles for theming images
Diffstat (limited to 'apps')
-rw-r--r-- | apps/theming/lib/Controller/ThemingController.php | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/apps/theming/lib/Controller/ThemingController.php b/apps/theming/lib/Controller/ThemingController.php index cc8af2cae3e..c68f3aab38a 100644 --- a/apps/theming/lib/Controller/ThemingController.php +++ b/apps/theming/lib/Controller/ThemingController.php @@ -383,6 +383,9 @@ class ThemingController extends Controller { } $response = new FileDisplayResponse($file); + $csp = new Http\ContentSecurityPolicy(); + $csp->allowInlineStyle(); + $response->setContentSecurityPolicy($csp); $response->cacheFor(3600); $response->addHeader('Content-Type', $this->config->getAppValue($this->appName, $key . 'Mime', '')); $response->addHeader('Content-Disposition', 'attachment; filename="' . $key . '"'); |