set CSP also as meta tag, to deal with misconfigured webservers mangling the HTTP header

2022-03-13 17:24:47 +01:00
parent 1807580226
commit 6c1f0dde0c
5 changed files with 15 additions and 0 deletions
--- a/tpl/page.php
+++ b/tpl/page.php
@@ -4,6 +4,7 @@ use PrivateBin\I18n;
 <html lang="<?php echo I18n::_('en'); ?>">
 	<head>
 		<meta charset="utf-8" />
+		<meta http-equiv="Content-Security-Policy" content="<?php echo I18n::encode($CSPHEADER); ?>">
 		<meta name="robots" content="noindex" />
 		<meta name="google" content="notranslate">
 		<title><?php echo I18n::_($NAME); ?></title>