diff options
| author | Paul "LeoNerd" Evans <paul@matrix.org> | 2016-08-18 14:21:01 +0100 |
|---|---|---|
| committer | Paul "LeoNerd" Evans <paul@matrix.org> | 2016-08-18 14:21:01 +0100 |
| commit | d5bf7a4a991b0bfe2134bb5e5c7e194f33f037aa (patch) | |
| tree | 2187b123096728d0ff329d354368ef48daed1fdb /synapse/rest/media/v1/download_resource.py | |
| parent | Since empty lookups now return 200/empty list not 404, we can safely log fail... (diff) | |
| parent | Merge pull request #1025 from matrix-org/erikj/appservice_stream (diff) | |
| download | synapse-d5bf7a4a991b0bfe2134bb5e5c7e194f33f037aa.tar.xz | |
Merge remote-tracking branch 'origin/develop' into paul/thirdpartylookup
Diffstat (limited to 'synapse/rest/media/v1/download_resource.py')
| -rw-r--r-- | synapse/rest/media/v1/download_resource.py | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/synapse/rest/media/v1/download_resource.py b/synapse/rest/media/v1/download_resource.py index 9f69620772..9f0625a822 100644 --- a/synapse/rest/media/v1/download_resource.py +++ b/synapse/rest/media/v1/download_resource.py @@ -45,6 +45,7 @@ class DownloadResource(Resource): @request_handler() @defer.inlineCallbacks def _async_render_GET(self, request): + request.setHeader("Content-Security-Policy", "sandbox") server_name, media_id, name = parse_media_id(request) if server_name == self.server_name: yield self._respond_local_file(request, media_id, name) |