diff --git a/controller/pagecontroller.php b/controller/pagecontroller.php index 47d35a412..d40f21e57 100644 --- a/controller/pagecontroller.php +++ b/controller/pagecontroller.php @@ -11,6 +11,7 @@ namespace OCA\Passman\Controller; +use OCP\AppFramework\Http\StrictContentSecurityPolicy; use OCP\IRequest; use OCP\AppFramework\Http\TemplateResponse; use OCP\AppFramework\Http\DataResponse; @@ -38,7 +39,15 @@ public function __construct($AppName, IRequest $request, $UserId){ */ public function index() { $params = ['user' => $this->userId]; - return new TemplateResponse('passman', 'main', $params); // templates/main.php + $response = new TemplateResponse('passman', 'main', $params); // templates/main.php + + $csp = new StrictContentSecurityPolicy(); + $csp->allowEvalScript(); + $csp->allowInlineStyle(); + + $response->setContentSecurityPolicy($csp); + + return $response; }