diff options
| author | Pierre Rudloff <contact@rudloff.pro> | 2016-09-20 17:24:29 +0200 |
|---|---|---|
| committer | Morris Jobke <hey@morrisjobke.de> | 2017-03-28 18:39:57 -0600 |
| commit | 19d3133ccf014f21ef238a045dd9cdbc49e78fb4 (patch) | |
| tree | f2d606f4f8795be906f0e98773e862324f56ffba /lib/public/AppFramework | |
| parent | 4f09dc71e0902a693ccb9c59a9ea6b1f258eefa1 (diff) | |
| download | nextcloud-server-19d3133ccf014f21ef238a045dd9cdbc49e78fb4.tar.gz nextcloud-server-19d3133ccf014f21ef238a045dd9cdbc49e78fb4.zip | |
Web app manifest
Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
Diffstat (limited to 'lib/public/AppFramework')
| -rw-r--r-- | lib/public/AppFramework/Http/EmptyContentSecurityPolicy.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/public/AppFramework/Http/EmptyContentSecurityPolicy.php b/lib/public/AppFramework/Http/EmptyContentSecurityPolicy.php index c53b5b2146c..09eb5a1c151 100644 --- a/lib/public/AppFramework/Http/EmptyContentSecurityPolicy.php +++ b/lib/public/AppFramework/Http/EmptyContentSecurityPolicy.php @@ -336,6 +336,7 @@ class EmptyContentSecurityPolicy { public function buildPolicy() { $policy = "default-src 'none';"; $policy .= "base-uri 'none';"; + $policy .= "manifest-src 'self';"; if(!empty($this->allowedScriptDomains) || $this->inlineScriptAllowed || $this->evalScriptAllowed) { $policy .= 'script-src '; |