Add 'sandbox' to CSP for media repo (#4284)

* Add 'sandbox' to the CSP for media repo * Changelog
2018-12-10 17:05:02 +00:00 · 2018-12-10 17:05:02 +00:00 · 1c0051114a
parent 128294d3e5
commit 1c0051114a
2 changed files with 3 additions and 1 deletions
--- a/changelog.d/4284.bugfix
+++ b/changelog.d/4284.bugfix
@ -0,0 +1 @@
+Add 'sandbox' to CSP for media reprository
--- a/synapse/rest/media/v1/download_resource.py
+++ b/synapse/rest/media/v1/download_resource.py
@ -48,7 +48,8 @@ class DownloadResource(Resource):
        set_cors_headers(request)
        request.setHeader(
            b"Content-Security-Policy",
-            b"default-src 'none';"
+            b"sandbox;"
+            b" default-src 'none';"
            b" script-src 'none';"
            b" plugin-types application/pdf;"
            b" style-src 'unsafe-inline';"