viscous/espocrm
1
0
Fork 0
mirror of https://github.com/espocrm/espocrm.git synced 2026-07-01 08:26:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

download csp and fix

Browse Source
This commit is contained in:
Yuri Kuznetsov
2022-08-22 11:37:26 +03:00
parent 76d9b3cf9c
commit c40070ceb0
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
application/Espo/EntryPoints/Download.php
View File

@@ -93,11 +93,13 @@ class Download implements EntryPoint
$disposition = 'attachment';
/** @var {string[]} $inlineMimeTypeList */
/** @var string[] $inlineMimeTypeList */
$inlineMimeTypeList = $this->metadata->get(['app', 'file', 'inlineMimeTypeList']) ?? [];
if (in_array($type, $inlineMimeTypeList)) {
$disposition = 'inline';
$response->setHeader('Content-Security-Policy', "default-src 'self'");
}
$response->setHeader('Content-Description', 'File Transfer');