devol/wallabag
1
0
Fork 0
mirror of https://github.com/wallabag/wallabag.git synced 2025-01-30 15:25:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3943 from wallabag/img-referrer

Browse Source 
Enable no-referrer on img tags, enable strict-origin-when-cross-origin by default
This commit is contained in:
Kevin Decherf 2019-05-12 23:44:33 +02:00 committed by GitHub
commit 295b714426
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/Wallabag/CoreBundle/Helper/ContentProxy.php
View File

@ -47,6 +47,7 @@ class ContentProxy
*/ */
public function updateEntry(Entry $entry, $url, array $content = [], $disableContentUpdate = false) public function updateEntry(Entry $entry, $url, array $content = [], $disableContentUpdate = false)
{ {
$this->graby->toggleImgNoReferrer(true);
if (!empty($content['html'])) { if (!empty($content['html'])) {
$content['html'] = $this->graby->cleanupHtml($content['html'], $url); $content['html'] = $this->graby->cleanupHtml($content['html'], $url);
} }

1
src/Wallabag/CoreBundle/Resources/views/base.html.twig
View File

@ -8,6 +8,7 @@
{% block head %} {% block head %}
<meta name="viewport" content="initial-scale=1.0"> <meta name="viewport" content="initial-scale=1.0">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="referrer" content="strict-origin-when-cross-origin">
<!--[if IE]> <!--[if IE]>
<meta http-equiv="X-UA-Compatible" content="IE=10"> <meta http-equiv="X-UA-Compatible" content="IE=10">
<![endif]--> <![endif]-->

2
web/wallassets/material.css
View File

File diff suppressed because one or more lines are too long