fix: added missing CSP for HTML5 exports

thorsten · Feb 18, 2023 · ca75f46 · ca75f46
1 parent bbc5d4a
commit ca75f46
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/phpmyfaq/src/phpMyFAQ/Export/Html5.php b/phpmyfaq/src/phpMyFAQ/Export/Html5.php
@@ -93,6 +93,10 @@ public function generate(int $categoryId = 0, bool $downwards = true, string $la
         $this->xml->startElement('meta');
         $this->xml->writeAttribute('charset', 'utf-8');
         $this->xml->endElement();
+        $this->xml->startElement('meta');
+        $this->xml->writeAttribute('http-equiv', 'Content-Security-Policy');
+        $this->xml->writeAttribute('content', 'default-src \'self\'; img-src https://*; child-src \'none\';');
+        $this->xml->endElement();
         $this->xml->endElement(); // </head>
 
         $this->xml->startElement('body');