fix: use sandbox CSP for file previews

2026-03-26 11:13:25 +01:00 · 2025-05-07 13:39:02 +02:00
parent 427e99c7b1
commit 1864951bdb
1 changed files with 1 additions and 1 deletions
--- a/backend/src/file/file.controller.ts
+++ b/backend/src/file/file.controller.ts
@@ -78,7 +78,7 @@ export class FileController {
      "Content-Type":
        mime?.lookup?.(file.metaData.name) || "application/octet-stream",
      "Content-Length": file.metaData.size,
-      "Content-Security-Policy": "script-src 'none'",
+      "Content-Security-Policy": "sandbox",
    };

    if (download === "true") {