fix(headers): only add Cross-Origin-Opener-Policy and Cross-Origin-Em…

…bedder-Policy on richdocuments Otherwise it's being added to absolutely all requests, creating issues in other apps Closes #4103 Signed-off-by: Thomas Citharel <[email protected]>
nextcloud · Nov 7, 2024 · 6c8edfa · 6c8edfa
1 parent 055392a
commit 6c8edfa
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/Listener/BeforeTemplateRenderedListener.php b/lib/Listener/BeforeTemplateRenderedListener.php
@@ -7,6 +7,7 @@
  */
 namespace OCA\Richdocuments\Listener;
 
+use OCA\Richdocuments\AppInfo\Application;
 use OCA\Richdocuments\Service\CapabilitiesService;
 use OCP\AppFramework\Http\Events\BeforeTemplateRenderedEvent;
 use OCP\EventDispatcher\Event;
@@ -24,7 +25,7 @@ public function handle(Event $event): void {
 			return;
 		}
 
-		if ($this->capabilitiesService->hasWASMSupport()) {
+		if ($this->capabilitiesService->hasWASMSupport() && $event->getResponse()->getApp() === Application::APPNAME) {
 			$event->getResponse()->addHeader('Cross-Origin-Opener-Policy', 'same-origin');
 			$event->getResponse()->addHeader('Cross-Origin-Embedder-Policy', 'require-corp');
 		}