From 3c30c3975ae9b56664f3049c4b71472c7ef96a62 Mon Sep 17 00:00:00 2001 From: Bryce Kwon Date: Tue, 18 Aug 2026 19:49:42 -0700 Subject: Print the raw-content headers with the rest --- source/ui-snapshot.c | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) (limited to 'source/ui-snapshot.c') diff --git a/source/ui-snapshot.c b/source/ui-snapshot.c index 3a14e16..3880f43 100644 --- a/source/ui-snapshot.c +++ b/source/ui-snapshot.c @@ -235,11 +235,7 @@ static int send_sig(const struct cgit_snapshot_format *format, return 0; } - // The body is whatever bytes the note holds, so these go out ahead of - // the usual headers to stop a browser sniffing it into a type it will - // act on. - html("X-Content-Type-Options: nosniff\n"); - html("Content-Security-Policy: default-src 'none'\n"); + ctx.page.untrusted = 1; ctx.page.mimetype = xstrdup("application/pgp-signature"); ctx.page.filename = xstrdup(sig_filename); cgit_print_http_headers(); -- cgit v2.8.0