Content-Security-Policy: sandbox for user-submitted files

2022-04-28 01:06:39 -04:00 · 2022-04-28 01:06:39 -04:00 · cee8c93659
parent 43065cfb73
commit cee8c93659
1 changed files with 1 additions and 0 deletions
--- a/src/download.rs
+++ b/src/download.rs
@ -45,6 +45,7 @@ impl DownloadingFile {

        let mut res = HttpResponse::build(StatusCode::OK);

+        res.insert_header((header::CONTENT_SECURITY_POLICY, "sandbox"));
        res.insert_header((header::CONTENT_TYPE, mime::APPLICATION_OCTET_STREAM));
        res.insert_header((
            header::CONTENT_DISPOSITION,