From cf6fc3107028d5f2cb3d3fd913a89a21441d3585 Mon Sep 17 00:00:00 2001
From: Gerben <gerben@treora.com>
Date: Mon, 10 Sep 2018 23:51:06 +0200
Subject: [PATCH] Add missing ':' in CSP

---
 lib/Controller/RawResponse.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/Controller/RawResponse.php b/lib/Controller/RawResponse.php
index 837d056..fee38a3 100644
--- a/lib/Controller/RawResponse.php
+++ b/lib/Controller/RawResponse.php
@@ -5,7 +5,7 @@ trait RawResponse {
 	protected function returnRawResponse($content, $mimetype) {
 		// Ugly hack to prevent security middleware messing up the CSP.
 		header(
-			"Content-Security-Policy: sandbox; default-src 'none'; img-src data:; media-src data; "
+			"Content-Security-Policy: sandbox; default-src 'none'; img-src data:; media-src data:; "
 			. "style-src data: 'unsafe-inline'; font-src data:; frame-src data:"
 		);
 		header("Content-Type: ${mimetype}");