Merge pull request #2176 from nextcloud/backport/2159/stable4

[stable4] Add gs.trustedHosts to form-action csp
nextcloud · Apr 29, 2022 · 0329aaf · 0329aaf
2 parents 61779e3 + 26337ac
commit 0329aaf
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/lib/AppInfo/Application.php b/lib/AppInfo/Application.php
@@ -247,6 +247,7 @@ public function updateCSP() {
 				foreach ($trustedList as $server) {
 					$policy->addAllowedFrameDomain($server);
 					$this->addTrustedRemote($policy, $server);
+					$policy->addAllowedFormActionDomain($server);
 				}
 			}
 			$remoteAccess = $container->getServer()->getRequest()->getParam('richdocuments_remote_access');