squidy/qBittorrent
1
0
Fork 0
mirror of https://github.com/qbittorrent/qBittorrent.git synced 2025-12-18 06:28:03 -06:00
Code Issues Packages Projects Releases Wiki Activity

Enforce referrer-policy in WebUI

Browse Source 
This stops leaking private data to other websites via Referrer header.
This commit is contained in:
Chocobo1
2018-12-10 22:14:53 +08:00
parent e1f19b7c75
commit 7fd30fa90f
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/webui/webapplication.cpp
View File

@@ -570,9 +570,11 @@ Http::Response WebApplication::processRequest(const Http::Request &request, cons
if (m_isHttpsEnabled) {
csp += QLatin1String(" upgrade-insecure-requests;");
}
header(Http::HEADER_CONTENT_SECURITY_POLICY, csp);
if (!m_isAltUIUsed)
header(Http::HEADER_REFERRER_POLICY, "same-origin");
return response();
}