mirror of
https://github.com/the-djmaze/snappymail.git
synced 2026-09-05 07:27:04 +03:00
Slight modification for https://github.com/the-djmaze/snappymail/issues/16
By default we use image proxy for privacy. This does not solve mailing tracking for hidden "read" images
This commit is contained in:
parent
d735893cd6
commit
b8357fd739
2 changed files with 5 additions and 2 deletions
|
|
@ -42,6 +42,9 @@ class Service
|
|||
\header('X-Content-Type-Options: nosniff');
|
||||
|
||||
$sContentSecurityPolicy = \trim($this->oActions->Config()->Get('security', 'content_security_policy', '')) ?: APP_DEFAULT_CSP;
|
||||
if ($this->oActions->Config()->Get('security', 'use_local_proxy_for_external_images', '')) {
|
||||
$sContentSecurityPolicy = preg_replace('/(img-src[^;]+)\\shttps:(\\s|;|$)/D', '$1$2', $sContentSecurityPolicy);
|
||||
}
|
||||
\header('Content-Security-Policy: '.$sContentSecurityPolicy, true);
|
||||
|
||||
$sXFrameOptionsHeader = \trim($this->oActions->Config()->Get('security', 'x_frame_options_header', '')) ?: 'DENY';
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue