From 0f97ddd5738ed7c485a8c1e5abe2b30bd6724022 Mon Sep 17 00:00:00 2001
From: cypherbits <info@avanix.es>
Date: Sun, 3 May 2020 15:08:30 +0200
Subject: [PATCH] Fix Content-Security-Policy header.

---
 chat.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/chat.php b/chat.php
index 172d838..4db7bb3 100644
--- a/chat.php
+++ b/chat.php
@@ -3285,7 +3285,7 @@ function send_headers(){
 	header('Cache-Control: no-cache, no-store, must-revalidate, max-age=0');
 	header('Expires: 0');
 	header('Referrer-Policy: no-referrer');
-	header('Content-Security-Policy: referrer never');
+	header("Content-Security-Policy: default-src 'self'; img-src *; media-src *; script-src 'self'; style-src *");
     header('X-Content-Type-Options: nosniff');
     header('X-Frame-Options: sameorigin');
     header('X-XSS-Protection: 1; mode=block');