From 258c863b628bf9bed4d6e7791cea0561d46cff58 Mon Sep 17 00:00:00 2001 From: Roeland Jago Douma Date: Mon, 9 Sep 2019 22:37:12 +0200 Subject: [PATCH] set default CSP on NotFoundResponse Signed-off-by: Roeland Jago Douma --- lib/public/AppFramework/Http/NotFoundResponse.php | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/public/AppFramework/Http/NotFoundResponse.php b/lib/public/AppFramework/Http/NotFoundResponse.php index 6d764ec526e..2ae3c41fe4a 100644 --- a/lib/public/AppFramework/Http/NotFoundResponse.php +++ b/lib/public/AppFramework/Http/NotFoundResponse.php @@ -37,6 +37,7 @@ class NotFoundResponse extends Response { public function __construct() { parent::__construct(); + $this->setContentSecurityPolicy(new ContentSecurityPolicy()); $this->setStatus(404); } -- 2.39.5