|
|
@ -119,7 +119,7 @@ public class ArbitraryDataRenderer { |
|
|
|
byte[] data = Files.readAllBytes(Paths.get(filePath)); // TODO: limit file size that can be read into memory
|
|
|
|
byte[] data = Files.readAllBytes(Paths.get(filePath)); // TODO: limit file size that can be read into memory
|
|
|
|
HTMLParser htmlParser = new HTMLParser(resourceId, inPath, prefix, usePrefix, data); |
|
|
|
HTMLParser htmlParser = new HTMLParser(resourceId, inPath, prefix, usePrefix, data); |
|
|
|
htmlParser.addAdditionalHeaderTags(); |
|
|
|
htmlParser.addAdditionalHeaderTags(); |
|
|
|
response.addHeader("Content-Security-Policy", "default-src 'self' 'unsafe-inline'"); |
|
|
|
response.addHeader("Content-Security-Policy", "default-src 'self' 'unsafe-inline'; media-src 'self' blob:"); |
|
|
|
response.setContentType(context.getMimeType(filename)); |
|
|
|
response.setContentType(context.getMimeType(filename)); |
|
|
|
response.setContentLength(htmlParser.getData().length); |
|
|
|
response.setContentLength(htmlParser.getData().length); |
|
|
|
response.getOutputStream().write(htmlParser.getData()); |
|
|
|
response.getOutputStream().write(htmlParser.getData()); |
|
|
@ -128,7 +128,7 @@ public class ArbitraryDataRenderer { |
|
|
|
// Regular file - can be streamed directly
|
|
|
|
// Regular file - can be streamed directly
|
|
|
|
File file = new File(filePath); |
|
|
|
File file = new File(filePath); |
|
|
|
FileInputStream inputStream = new FileInputStream(file); |
|
|
|
FileInputStream inputStream = new FileInputStream(file); |
|
|
|
response.addHeader("Content-Security-Policy", "default-src 'self' 'unsafe-inline'"); |
|
|
|
response.addHeader("Content-Security-Policy", "default-src 'self' 'unsafe-inline'; media-src 'self' blob:"); |
|
|
|
response.setContentType(context.getMimeType(filename)); |
|
|
|
response.setContentType(context.getMimeType(filename)); |
|
|
|
int bytesRead, length = 0; |
|
|
|
int bytesRead, length = 0; |
|
|
|
byte[] buffer = new byte[10240]; |
|
|
|
byte[] buffer = new byte[10240]; |
|
|
|