Add additional CSP protection to files.get endpoint

2026-06-13 11:25:03 +03:00 · 2025-04-23 21:44:34 -04:00
1 changed files with 1 additions and 0 deletions
@@ -96,6 +96,7 @@ router.get(
    ctx.set("Accept-Ranges", "bytes");
    ctx.set("Cache-Control", cacheHeader);
    ctx.set("Content-Type", contentType);
+    ctx.set("Content-Security-Policy", "sandbox");
    ctx.attachment(fileName, {
      type: forceDownload
        ? "attachment"