Prevent CSP use with REST API responses

Do not send CSP headers with AtoM REST API responses.
artefactual · Oct 31, 2023 · 06178a0 · 06178a0
1 parent 4ec24ec
commit 06178a0
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/lib/filter/QubitCSPFilter.php b/lib/filter/QubitCSPFilter.php
@@ -69,7 +69,7 @@ public function execute($filterChain)
 
         $filterChain->execute();
 
-        if (false !== strpos($context->response->getContentType(), 'text/xml')) {
+        if (preg_match('~(text/xml|application/json)~', $context->response->getContentType())) {
             return;
         }
 

diff --git a/plugins/arRestApiPlugin/modules/api/config/filters.yml b/plugins/arRestApiPlugin/modules/api/config/filters.yml
@@ -13,5 +13,9 @@ restApiFilter:
   class: arRestApiPluginFilter
 
 QubitTransaction: ~
+
+QubitCSP:
+  enable: false
+
 cache: ~
 execution: ~
-Original file line number
+Diff line change
@@ Expand Up / @@ -69,7 +69,7 @@ public function execute($filterChain) @@
             $filterChain->execute();
-            if (false !== strpos($context->response->getContentType(), 'text/xml')) {
+            if (preg_match('~(text/xml|application/json)~', $context->response->getContentType())) {
                 return;
             }
@@ Expand Down @@