Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

added "media-src: 'self'" to CSP for resources #3578

Merged
merged 6 commits into from
Sep 25, 2018
Merged

added "media-src: 'self'" to CSP for resources #3578

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
ca31144
added "media-src: 'self'" to CSP for resources
remjey Jul 23, 2018
a98b492
added changelog.d entry
remjey Jul 23, 2018
604c50d
Merge branch 'develop' into resource-downloa-csp-fix
remjey Sep 19, 2018
cb38fd9
shortened changelog.d entry
remjey Sep 19, 2018
bb5d380
made a more useful changelog.d entry
remjey Sep 19, 2018
5111a3a
add contributor name to changelog
richvdh Sep 25, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions changelog.d/3578.bugfix
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
Fix problem when playing media from Chrome using direct URL (thanks @remjey!)
1 change: 1 addition & 0 deletions synapse/rest/media/v1/download_resource.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,6 +52,7 @@ def _async_render_GET(self, request):
b" script-src 'none';"
b" plugin-types application/pdf;"
b" style-src 'unsafe-inline';"
b" media-src 'self';"
b" object-src 'self';"
)
server_name, media_id, name = parse_media_id(request)
Expand Down