chinwag/chinwagsocial
chinwag/chinwagsocial
2
0
Fork 0
Code Issues Pull requests Releases 14 Wiki Activity

Add hardened headers to user-uploaded files

Browse source
This commit is contained in:
Claire 2023-06-21 14:18:04 +02:00
commit c309011346
2 changed files with 7 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
config/application.rb
View file

@ -161,6 +161,10 @@ module Mastodon
config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time, ActiveSupport::HashWithIndifferentAccess, ActiveSupport::TimeWithZone, ActiveSupport::TimeZone]
config.public_file_server.headers = {
'X-Content-Type-Options' => 'nosniff',
}
# config.paths.add File.join('app', 'api'), glob: File.join('**', '*.rb')
# config.autoload_paths += Dir[Rails.root.join('app', 'api', '*')]