Add CORP header to /download and /thumbnail (#3299)

Part of #3222 matrix-org/matrix-spec-proposals#3828
matrix-org · Jan 10, 2024 · e342420 · e342420
1 parent 57646d5
commit e342420
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/mediaapi/routing/routing.go b/mediaapi/routing/routing.go
@@ -123,6 +123,7 @@ func makeDownloadAPI(
 
 		// Set internal headers returned regardless of the outcome of the request
 		util.SetCORSHeaders(w)
+		w.Header().Set("Cross-Origin-Resource-Policy", "cross-origin")
 		// Content-Type will be overridden in case of returning file data, else we respond with JSON-formatted errors
 		w.Header().Set("Content-Type", "application/json")