Commit 7e9b6900 authored by Ad Schellevis's avatar Ad Schellevis Committed by Franco Fichtner

(openvpn client export) add X-Content-Type-Options: nosniff header, closes...

(openvpn client export) add X-Content-Type-Options: nosniff header, closes https://github.com/opnsense/core/issues/1204

(cherry picked from commit ab3098d6)
parent 42fbfa72
...@@ -252,6 +252,7 @@ if (isset($config['openvpn']['openvpn-server'])) { ...@@ -252,6 +252,7 @@ if (isset($config['openvpn']['openvpn-server'])) {
header("Content-Type: application/octet-stream"); header("Content-Type: application/octet-stream");
header("Content-Disposition: attachment; filename={$exp_name}"); header("Content-Disposition: attachment; filename={$exp_name}");
header("Content-Length: $exp_size"); header("Content-Length: $exp_size");
header("X-Content-Type-Options: nosniff");
if (($act == "conf") || (substr($act, 0, 10) == "confinline")) { if (($act == "conf") || (substr($act, 0, 10) == "confinline")) {
echo $exp_path; echo $exp_path;
} else { } else {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment