diff options
context:
space:
mode:
authorBryce Kwon <bryce@brycekwon.com>
committerBryce Kwon <bryce@brycekwon.com>
commit
parent
tree
download
Print the raw-content headers with the rest
Diffstat (limited to 'source/ui-blob.c')
-rw-r--r--source/ui-blob.c8
1 file changed, 1 insertion, 7 deletions
diff --git a/source/ui-blob.c b/source/ui-blob.c
index db1d0c1..8f68d04 100644
--- a/source/ui-blob.c
+++ b/source/ui-blob.c
@@ -205,13 +205,7 @@ void cgit_print_blob(const char *hex, char *path, const char *head, int file_onl
else
ctx.page.mimetype = "text/plain";
ctx.page.filename = path;
-
- // The bytes are whatever the repository holds, so the browser is told
- // not to guess a type of its own from them and not to load anything
- // they reference. Both must go out before cgit_print_http_headers,
- // which closes the header block.
- html("X-Content-Type-Options: nosniff\n");
- html("Content-Security-Policy: default-src 'none'\n");
+ ctx.page.untrusted = 1;
cgit_print_http_headers();
html_raw(buf, size);
free(buf);