diff options
author | Roeland Jago Douma <roeland@famdouma.nl> | 2019-04-03 18:42:34 +0200 |
---|---|---|
committer | Roeland Jago Douma <roeland@famdouma.nl> | 2019-04-16 14:09:39 +0200 |
commit | 7276735eb423ed126333923bb921d9d4bef16f07 (patch) | |
tree | 4131f2b8665f2e5066eb84d9ef39691709accc42 /lib/public/AppFramework/Http/DataDisplayResponse.php | |
parent | 4e88cd3aae0b1c8e662197dd10e2e65ffe8cf489 (diff) | |
download | nextcloud-server-7276735eb423ed126333923bb921d9d4bef16f07.tar.gz nextcloud-server-7276735eb423ed126333923bb921d9d4bef16f07.zip |
Set empty CSP by default
For #14179
By default responses should have the strictest (and simplest) CSP
possible. Only template responses should require an actual CSP.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Diffstat (limited to 'lib/public/AppFramework/Http/DataDisplayResponse.php')
-rw-r--r-- | lib/public/AppFramework/Http/DataDisplayResponse.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/public/AppFramework/Http/DataDisplayResponse.php b/lib/public/AppFramework/Http/DataDisplayResponse.php index 4932b9db668..3ab64c470e5 100644 --- a/lib/public/AppFramework/Http/DataDisplayResponse.php +++ b/lib/public/AppFramework/Http/DataDisplayResponse.php @@ -49,6 +49,8 @@ class DataDisplayResponse extends Response { */ public function __construct($data='', $statusCode=Http::STATUS_OK, $headers=[]) { + parent::__construct(); + $this->data = $data; $this->setStatus($statusCode); $this->setHeaders(array_merge($this->getHeaders(), $headers)); |