Fix attach files dropzone in report issue page

Apply the same exception as view page until #21651 is fixed. Fixes #21743
mantisbt · Oct 4, 2016 · 16fd68a · 16fd68a
1 parent fd2a8ba
commit 16fd68a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/core/http_api.php b/core/http_api.php
@@ -235,7 +235,8 @@ function http_security_headers() {
 
 		# Relaxing policy for view issue page to allow inline scripts.
 		# Should be removed once #21651 is fixed.
-		if( 'view.php' == basename( $_SERVER['SCRIPT_NAME'] ) ) {
+		if( 'view.php' == basename( $_SERVER['SCRIPT_NAME'] ) ||
+			'bug_report_page.php' == basename( $_SERVER['SCRIPT_NAME'] ) ) {
 			http_csp_add( 'script-src', "'unsafe-inline'" );
 		}