Setup CSP for pdf.js sandbox.

10 years ago · 33f0ae2071
1 changed files with 1 additions and 0 deletions
--- a/static/partials/pdfcanvas_sandbox.html
+++ b/static/partials/pdfcanvas_sandbox.html
@ -2,6 +2,7 @@
				@@ -2,6 +2,7 @@
 <html>
 	<head>
 		<title>pdf.js Sandbox</title>
+		<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src __PARENT_ORIGIN__; img-src 'self'; style-src 'unsafe-inline'">
 		<style type="text/css">
 		html, body {
 			height:100%;