floogulinc/akkoma
1
0
Fork 0
forked from AkkomaGang/akkoma
Code Pull requests Activity

CSP: Allow iframes on embed player

Browse source
This commit is contained in:
href 2019-02-19 18:17:37 +01:00
parent 2d21ea1a0e
commit aa9af1d639
No known key found for this signature in database
GPG key ID: EE8296C1A152C325
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
lib/pleroma/web/ostatus/ostatus_controller.ex
View file

@ -194,6 +194,11 @@ def notice_player(conn, %{"id" => id}) do
true <- String.starts_with?(url["mediaType"], ["audio", "video"]) do true <- String.starts_with?(url["mediaType"], ["audio", "video"]) do
conn conn
|> put_layout(:metadata_player) |> put_layout(:metadata_player)
|> put_resp_header("x-frame-options", "ALLOW")
|> put_resp_header(
"content-security-policy",
"default-src 'none'; img-src 'self' data: https:; media-src 'self' https:;"
)
|> put_view(Pleroma.Web.Metadata.PlayerView) |> put_view(Pleroma.Web.Metadata.PlayerView)
|> render("player.html", url) |> render("player.html", url)
else else