diff options
Diffstat (limited to 'api')
| -rw-r--r-- | api/command_loadtest.go | 2 | ||||
| -rw-r--r-- | api/context.go | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/api/command_loadtest.go b/api/command_loadtest.go index c7c4f98f5..c76bc713f 100644 --- a/api/command_loadtest.go +++ b/api/command_loadtest.go @@ -289,7 +289,7 @@ func (me *LoadTestProvider) UrlCommand(c *Context, channelId string, message str // provide a shortcut to easily access tests stored in doc/developer/tests if !strings.HasPrefix(url, "http") { - url = "https://raw.githubusercontent.com/mattermost/platform/master/doc/developer/tests/" + url + url = "https://raw.githubusercontent.com/mattermost/platform/master/tests/" + url if path.Ext(url) == "" { url += ".md" diff --git a/api/context.go b/api/context.go index d0b4f85d2..9e05c5d87 100644 --- a/api/context.go +++ b/api/context.go @@ -161,7 +161,7 @@ func (h handler) ServeHTTP(w http.ResponseWriter, r *http.Request) { // Instruct the browser not to display us in an iframe for anti-clickjacking if !h.isApi { w.Header().Set("X-Frame-Options", "DENY") - w.Header().Set("Content-Security-Policy", "frame-ancestors none") + w.Header().Set("Content-Security-Policy", "frame-ancestors 'none'") } else { // All api response bodies will be JSON formatted by default w.Header().Set("Content-Type", "application/json") |