summaryrefslogtreecommitdiff
path: root/app/Core/Http
diff options
context:
space:
mode:
authorMarien Fressinaud <dev@marienfressinaud.fr>2016-01-23 18:47:47 +0100
committerMarien Fressinaud <dev@marienfressinaud.fr>2016-01-23 18:47:47 +0100
commit8baa417ecef452ad033cb43b555835e0c3d7397a (patch)
treedc6e55c899685e6c568727d98cbac277561f869f /app/Core/Http
parentcc93b869916fe34e38c4f49f317abf7c2b8e8f2a (diff)
Move default-src CSP rule to ClassProvider
It was impossible to override the default-src CSP rule inside a plugin. This commit fixes this limitation by moving the assignation of the rule from Response class to ClassProvider.
Diffstat (limited to 'app/Core/Http')
-rw-r--r--app/Core/Http/Response.php1
1 files changed, 0 insertions, 1 deletions
diff --git a/app/Core/Http/Response.php b/app/Core/Http/Response.php
index fdd7d994..7fefddeb 100644
--- a/app/Core/Http/Response.php
+++ b/app/Core/Http/Response.php
@@ -220,7 +220,6 @@ class Response extends Base
*/
public function csp(array $policies = array())
{
- $policies['default-src'] = "'self'";
$values = '';
foreach ($policies as $policy => $acl) {