groove/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-12-07 12:29:36 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update callback url check

Browse source 
Co-authored-by: Denis Arnst <git@sapd.eu>
This commit is contained in:
advplyr 2025-08-10 17:08:25 -05:00
parent 2116f60133
commit 99a3867ce9
3 changed files with 64 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
server/Server.js
View file

@ -229,6 +229,10 @@ class Server {
res.setHeader('Content-Security-Policy', "frame-ancestors 'self'")
}
// Security: Prevent referrer leakage to protect against token exposure
// Using 'no-referrer' to completely prevent token leakage in referer headers
res.setHeader('Referrer-Policy', 'no-referrer')
/**
* @temporary
* This is necessary for the ebook & cover API endpoint in the mobile apps