From a85f2f416524036cf7e55fec2e35ae575c0eb223 Mon Sep 17 00:00:00 2001
From: Roeland Jago Douma <roeland@famdouma.nl>
Date: Mon, 9 Sep 2019 22:37:12 +0200
Subject: [PATCH] set default CSP on NotFoundResponse
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
---
lib/public/AppFramework/Http/NotFoundResponse.php | 1 +
1 file changed, 1 insertion(+)
diff --git a/lib/public/AppFramework/Http/NotFoundResponse.php b/lib/public/AppFramework/Http/NotFoundResponse.php
index 6d764ec526e..2ae3c41fe4a 100644
--- a/lib/public/AppFramework/Http/NotFoundResponse.php
+++ b/lib/public/AppFramework/Http/NotFoundResponse.php
@@ -37,6 +37,7 @@ class NotFoundResponse extends Response {
public function __construct() {
parent::__construct();
+ $this->setContentSecurityPolicy(new ContentSecurityPolicy());
$this->setStatus(404);
}
--
GitLab