Add 'sandbox' to CSP for media repo (#4284)

* Add 'sandbox' to the CSP for media repo * Changelog

Add 'sandbox' to CSP for media repo (#4284)
1c005111 · David Baker · Richard van der Hoff · 128294d3 · 1c005111 · 1c005111
Commit 1c005111 authored 6 years ago by David Baker Committed by Richard van der Hoff 6 years ago
--- a/changelog.d/4284.bugfix
+++ b/changelog.d/4284.bugfix
+Add 'sandbox' to CSP for media reprository
--- a/synapse/rest/media/v1/download_resource.py
+++ b/synapse/rest/media/v1/download_resource.py
@@ -48,7 +48,8 @@ class DownloadResource(Resource):
        set_cors_headers(request)
        request.setHeader(
            b"Content-Security-Policy",
-            b"default-src 'none';"
+            b"sandbox;"
+            b" default-src 'none';"
            b" script-src 'none';"
            b" plugin-types application/pdf;"
            b" style-src 'unsafe-inline';"