|
|
@@ -5,7 +5,7 @@ trait RawResponse { |
|
|
protected function returnRawResponse($content, $mimetype) { |
|
|
protected function returnRawResponse($content, $mimetype) { |
|
|
// Ugly hack to prevent security middleware messing up the CSP. |
|
|
// Ugly hack to prevent security middleware messing up the CSP. |
|
|
header( |
|
|
header( |
|
|
"Content-Security-Policy: sandbox; default-src 'none'; img-src data:; media-src data; " |
|
|
|
|
|
|
|
|
"Content-Security-Policy: sandbox; default-src 'none'; img-src data:; media-src data:; " |
|
|
. "style-src data: 'unsafe-inline'; font-src data:; frame-src data:" |
|
|
. "style-src data: 'unsafe-inline'; font-src data:; frame-src data:" |
|
|
); |
|
|
); |
|
|
header("Content-Type: ${mimetype}"); |
|
|
header("Content-Type: ${mimetype}"); |
|
|
|
