Skip to content

set default CSP on NotFoundResponse - #17078

Merged
rullzer merged 1 commit into
masterfrom
fix/default_csp_404
Sep 10, 2019
Merged

set default CSP on NotFoundResponse#17078
rullzer merged 1 commit into
masterfrom
fix/default_csp_404

Conversation

@rullzer

Copy link
Copy Markdown
Member

Found when working on #17077

To test just navigate to an invalid link share.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
@rullzer

Copy link
Copy Markdown
MemberAuthor

/backport to stable17

@ChristophWurst

Copy link
Copy Markdown
Member

Why in NotFoundResponse and not the Response base class?

@rullzer

Copy link
Copy Markdown
MemberAuthor

Why in NotFoundResponse and not the Response base class?

Because not all responses should have the main CSP set.
Only user facing responses should

@rullzer
rullzer merged commit 776889f into masterSep 10, 2019
@rullzer
rullzer deleted the fix/default_csp_404 branch September 10, 2019 07:23
@backportbot-nextcloud

Copy link
Copy Markdown

backport to stable17 in #17079

@nickvergessen

Copy link
Copy Markdown
Member

So actually this could just extend the TemplateResponse?

@rullzer

Copy link
Copy Markdown
MemberAuthor

So actually this could just extend the TemplateResponse?

yes that would also make sense I guess

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to reviewWaiting for reviewsbug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@rullzer@ChristophWurst@nickvergessen@skjnldsv