search

guusdk / httpfileuploadcomponent

A XMPP External Component that implements XEP-0363 'HTTP File Upload'.
Apache License 2.0
8 stars 10 forks source link

fix #46: Add Content-Security-Policy header #47

Closed guusdk closed 10 months ago

guusdk commented 10 months ago

The added Content-Security-Policy header instructs browsers to not execute scripts that are served by the servlet.

It does so by defining an empty collection of valid sources for scripts.