diff --git a/lib/AppInfo/Application.php b/lib/AppInfo/Application.php index 449d0bcc9..9fbb54680 100644 --- a/lib/AppInfo/Application.php +++ b/lib/AppInfo/Application.php @@ -211,9 +211,7 @@ public function updateCSP() { if ($publicWopiUrl !== '') { $policy->addAllowedFrameDomain('\'self\''); $policy->addAllowedFrameDomain($this->domainOnly($publicWopiUrl)); - if (method_exists($policy, 'addAllowedFormActionDomain')) { - $policy->addAllowedFormActionDomain($this->domainOnly($publicWopiUrl)); - } + $policy->addAllowedFormActionDomain($this->domainOnly($publicWopiUrl)); } /** diff --git a/lib/Controller/DocumentController.php b/lib/Controller/DocumentController.php index 23e1bde5a..1c14c893f 100644 --- a/lib/Controller/DocumentController.php +++ b/lib/Controller/DocumentController.php @@ -159,6 +159,7 @@ private function setupPolicy($response) { $policy = new ContentSecurityPolicy(); $policy->addAllowedFrameDomain($wopiDomain); $policy->allowInlineScript(true); + $policy->addAllowedFormActionDomain($wopiDomain); $response->setContentSecurityPolicy($policy); $featurePolicy = new FeaturePolicy();