Some big update

2026-03-25 14:35:44 +01:00
parent 0abd37d7a5
commit 867da15823
111 changed files with 173994 additions and 2061 deletions
--- a/application/Espo/EntryPoints/Attachment.php
+++ b/application/Espo/EntryPoints/Attachment.php
@@ -95,7 +95,7 @@ class Attachment implements EntryPoint
        $response
            ->setHeader('Content-Length', (string) $size)
            ->setHeader('Cache-Control', 'private, max-age=864000, immutable')
-            ->setHeader('Content-Security-Policy', "default-src 'self'")
+            ->setHeader('Content-Security-Policy', "default-src 'self'; script-src 'none'; object-src 'none';")
            ->setBody($stream);
    }