X-Git-Url: https://gitweb.ps.run/ps-cgit/blobdiff_plain/30802126d48e145191a281a7f43109edfbcf490f..baa5ad1f80f56d3c0b0095bfb468fab28c9b4982:/ui-blob.c?ds=sidebyside

diff --git a/ui-blob.c b/ui-blob.c
index 70a671e..d388489 100644
--- a/ui-blob.c
+++ b/ui-blob.c
@@ -161,14 +161,15 @@ void cgit_print_blob(const char *hex, char *path, const char *head, int file_onl
 	}
 
 	buf[size] = '\0';
-	ctx.page.mimetype = ctx.qry.mimetype;
-	if (!ctx.page.mimetype) {
-		if (buffer_is_binary(buf, size))
-			ctx.page.mimetype = "application/octet-stream";
-		else
-			ctx.page.mimetype = "text/plain";
-	}
+	if (buffer_is_binary(buf, size))
+		ctx.page.mimetype = "application/octet-stream";
+	else
+		ctx.page.mimetype = "text/plain";
 	ctx.page.filename = path;
+
+	html("X-Content-Type-Options: nosniff\n");
+	html("Content-Security-Policy: default-src 'none'\n");
 	cgit_print_http_headers();
 	html_raw(buf, size);
+	free(buf);
 }