diff options
| author | Roeland Jago Douma <rullzer@users.noreply.github.com> | 2017-03-17 08:39:02 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-03-17 08:39:02 +0100 |
| commit | 9915aa6d9c5f5cf4ebac0b6bc0df0c16ca215c70 (patch) | |
| tree | d8625ad9a7b6508d15fcc3c8a1005ddcb07f94ab /tests/lib/AppFramework/Http/DataResponseTest.php | |
| parent | 7a3acff7824ad8a83f6fcec7915a8a88b0a7d4df (diff) | |
| parent | 9e957d0ac900b845468a42ed1b2192d5b10b5753 (diff) | |
| download | nextcloud-server-9915aa6d9c5f5cf4ebac0b6bc0df0c16ca215c70.tar.gz nextcloud-server-9915aa6d9c5f5cf4ebac0b6bc0df0c16ca215c70.zip | |
Merge pull request #3870 from nextcloud/add-base-uri-to-csp-policy
Add base-uri to CSP policy
Diffstat (limited to 'tests/lib/AppFramework/Http/DataResponseTest.php')
| -rw-r--r-- | tests/lib/AppFramework/Http/DataResponseTest.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tests/lib/AppFramework/Http/DataResponseTest.php b/tests/lib/AppFramework/Http/DataResponseTest.php index 159efded97a..bbd23c874d7 100644 --- a/tests/lib/AppFramework/Http/DataResponseTest.php +++ b/tests/lib/AppFramework/Http/DataResponseTest.php @@ -68,7 +68,7 @@ class DataResponseTest extends \Test\TestCase { $expectedHeaders = [ 'Cache-Control' => 'no-cache, no-store, must-revalidate', - 'Content-Security-Policy' => "default-src 'none';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';connect-src 'self';media-src 'self'", + 'Content-Security-Policy' => "default-src 'none';base-uri 'none';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';connect-src 'self';media-src 'self'", ]; $expectedHeaders = array_merge($expectedHeaders, $headers); |