By default we use image proxy for privacy.
This does not solve mailing tracking for hidden "read" images
This commit is contained in:
djmaze 2020-09-28 19:18:09 +02:00
parent d735893cd6
commit b8357fd739
2 changed files with 5 additions and 2 deletions

View file

@ -42,6 +42,9 @@ class Service
\header('X-Content-Type-Options: nosniff');
$sContentSecurityPolicy = \trim($this->oActions->Config()->Get('security', 'content_security_policy', '')) ?: APP_DEFAULT_CSP;
if ($this->oActions->Config()->Get('security', 'use_local_proxy_for_external_images', '')) {
$sContentSecurityPolicy = preg_replace('/(img-src[^;]+)\\shttps:(\\s|;|$)/D', '$1$2', $sContentSecurityPolicy);
}
\header('Content-Security-Policy: '.$sContentSecurityPolicy, true);
$sXFrameOptionsHeader = \trim($this->oActions->Config()->Get('security', 'x_frame_options_header', '')) ?: 'DENY';