upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2025-12-18 15:56:14 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 8

Merge pull request #57133 from nextcloud/fix-template-headers-injection

Browse source 
fix(lib): include headers from OC\Template\Template as well in produced HTML
This commit is contained in:
Côme Chilliet 2025-12-18 11:59:09 +01:00 committed by GitHub
commit 9b1227749f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/private/Template/Template.php
View file

@ -122,7 +122,7 @@ class Template extends Base implements ITemplate {
// Add custom headers
$headers = '';
foreach (\OC_Util::$headers as $header) {
foreach (array_merge(\OC_Util::$headers, $this->headers) as $header) {
$headers .= '<' . Util::sanitizeHTML($header['tag']);
if (strcasecmp($header['tag'], 'script') === 0 && in_array('src', array_map('strtolower', array_keys($header['attributes'])))) {
$headers .= ' defer';