From 62d1c0fae9a8370c8f28e2592a660a606f689ec8 Mon Sep 17 00:00:00 2001
From: Yuri Kuznetsov <yurikuzn@users.noreply.github.com>
Date: Fri, 4 Nov 2022 10:36:00 +0200
Subject: [PATCH] attachment csp

---
 application/Espo/EntryPoints/Attachment.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/application/Espo/EntryPoints/Attachment.php b/application/Espo/EntryPoints/Attachment.php
index 4a9fbc33d4..b8ec347028 100644
--- a/application/Espo/EntryPoints/Attachment.php
+++ b/application/Espo/EntryPoints/Attachment.php
@@ -111,6 +111,7 @@ class Attachment implements EntryPoint
         $response
             ->setHeader('Pragma', 'public')
             ->setHeader('Content-Length', (string) $size)
+            ->setHeader('Content-Security-Policy', "default-src 'self'")
             ->setBody($stream);
     }