From 7276735eb423ed126333923bb921d9d4bef16f07 Mon Sep 17 00:00:00 2001 From: Roeland Jago Douma Date: Wed, 3 Apr 2019 18:42:34 +0200 Subject: Set empty CSP by default For #14179 By default responses should have the strictest (and simplest) CSP possible. Only template responses should require an actual CSP. Signed-off-by: Roeland Jago Douma --- lib/public/AppFramework/Http/FileDisplayResponse.php | 2 ++ 1 file changed, 2 insertions(+) (limited to 'lib/public/AppFramework/Http/FileDisplayResponse.php') diff --git a/lib/public/AppFramework/Http/FileDisplayResponse.php b/lib/public/AppFramework/Http/FileDisplayResponse.php index ab23701f893..2d2dd29e6a1 100644 --- a/lib/public/AppFramework/Http/FileDisplayResponse.php +++ b/lib/public/AppFramework/Http/FileDisplayResponse.php @@ -45,6 +45,8 @@ class FileDisplayResponse extends Response implements ICallbackResponse { */ public function __construct($file, $statusCode=Http::STATUS_OK, $headers=[]) { + parent::__construct(); + $this->file = $file; $this->setStatus($statusCode); $this->setHeaders(array_merge($this->getHeaders(), $headers)); -- cgit v1.2.3