Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2026-03-26 13:04:10 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Add CORP headers to media repo

Browse source 
MSC: https://github.com/matrix-org/matrix-spec-proposals/pull/3828
This commit is contained in:
Travis Ralston 2022-08-02 17:30:14 -06:00
parent b36d4eff7d
commit bd66aa1c38
2 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
changelogs/client_server/newsfragments/1197.feature Normal file
View file

@ -0,0 +1 @@
Add `Cross-Origin-Resource-Policy` (CORP) headers to media repository, as per [MSC3828](https://github.com/matrix-org/matrix-spec-proposals/pull/3828).

6
content/client-server-api/modules/content_repo.md
View file

@ -19,6 +19,12 @@ When serving content, the server SHOULD provide a
`Content-Security-Policy` header. The recommended policy is
`sandbox; default-src 'none'; script-src 'none'; plugin-types application/pdf; style-src 'unsafe-inline'; object-src 'self';`.
{{% added-in v="1.4" %}}
The server SHOULD additionally provide `Cross-Origin-Resource-Policy: cross-origin`
when serving content to allow (web) clients access to APIs which interact
with the media repository, such as `SharedArrayBuffer`.
#### Matrix Content (MXC) URIs
Content locations are represented as Matrix Content (MXC) URIs. They