Setup CSP for WebODF sandbox.

10 years ago · 5ae175cc88
1 changed files with 1 additions and 0 deletions
--- a/static/partials/odfcanvas_sandbox.html
+++ b/static/partials/odfcanvas_sandbox.html
@ -2,6 +2,7 @@
				@@ -2,6 +2,7 @@
 <html>
 	<head>
 		<title>WebODF Sandbox</title>
+		<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src __PARENT_ORIGIN__; img-src data:; style-src 'unsafe-inline'">
 		<style type="text/css">
 		html, body {
 			height:100%;