From 8bbbca0d6d8f0a5546bc5046919499cbb4abb54f Mon Sep 17 00:00:00 2001 From: Bryan Frimin Date: Thu, 2 Jul 2026 17:39:02 +0200 Subject: [PATCH] Remove no required header fields Signed-off-by: Bryan Frimin --- pkg/server/api/files/v1/handler.go | 2 -- 1 file changed, 2 deletions(-) diff --git a/pkg/server/api/files/v1/handler.go b/pkg/server/api/files/v1/handler.go index cb86d31a0..435559928 100644 --- a/pkg/server/api/files/v1/handler.go +++ b/pkg/server/api/files/v1/handler.go @@ -158,8 +158,6 @@ func (h *Handler) handleGetPublicFile(w http.ResponseWriter, r *http.Request) { w.Header().Set("Content-Type", file.MimeType) w.Header().Set("Content-Length", strconv.FormatInt(file.FileSize, 10)) - w.Header().Set("X-Content-Type-Options", "nosniff") - w.Header().Set("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox") if !obj.LastModified.IsZero() { w.Header().Set("Last-Modified", obj.LastModified.UTC().Format(http.TimeFormat))