From 7276735eb423ed126333923bb921d9d4bef16f07 Mon Sep 17 00:00:00 2001 From: Roeland Jago Douma Date: Wed, 3 Apr 2019 18:42:34 +0200 Subject: Set empty CSP by default For #14179 By default responses should have the strictest (and simplest) CSP possible. Only template responses should require an actual CSP. Signed-off-by: Roeland Jago Douma --- lib/public/AppFramework/Http/NotFoundResponse.php | 2 ++ 1 file changed, 2 insertions(+) (limited to 'lib/public/AppFramework/Http/NotFoundResponse.php') diff --git a/lib/public/AppFramework/Http/NotFoundResponse.php b/lib/public/AppFramework/Http/NotFoundResponse.php index 7f068a4c413..6d764ec526e 100644 --- a/lib/public/AppFramework/Http/NotFoundResponse.php +++ b/lib/public/AppFramework/Http/NotFoundResponse.php @@ -35,6 +35,8 @@ class NotFoundResponse extends Response { * @since 8.1.0 */ public function __construct() { + parent::__construct(); + $this->setStatus(404); } -- cgit v1.2.3