summaryrefslogtreecommitdiffstats
path: root/application
diff options
context:
space:
mode:
authorFlorian Pritz <bluewind@xinu.at>2012-03-09 14:47:46 +0100
committerFlorian Pritz <bluewind@xinu.at>2012-03-09 14:47:46 +0100
commit50bdd72578ca52a1d9a2c3f7387deedfb8faeb43 (patch)
treefdb8b6c033fc1c4b96da4ee1fa99b101d49a5329 /application
parent3716c33b95ec5012c32f0b973a856449ead9c940 (diff)
CSP: allow object-src
Video files won't play without this. Signed-off-by: Florian Pritz <bluewind@xinu.at>
Diffstat (limited to 'application')
-rw-r--r--application/models/file_mod.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/application/models/file_mod.php b/application/models/file_mod.php
index 718ee21ec..7968324b4 100644
--- a/application/models/file_mod.php
+++ b/application/models/file_mod.php
@@ -263,7 +263,7 @@ class File_mod extends CI_Model {
if (!$can_highlight || $filesize_too_big || !$mode) {
foreach (array("X-WebKit-CSP", "X-Content-Security-Policy") as $header_name) {
- header("$header_name: allow 'none'; img-src *; media-src *; font-src *; style-src *; script-src 'none'; object-src 'none'; frame-src 'none'; ");
+ header("$header_name: allow 'none'; img-src *; media-src *; font-src *; style-src *; script-src 'none'; object-src *; frame-src 'none'; ");
}
rangeDownload($file, $filedata["filename"], $type);
exit();