<h2>Editing File: /var/softaculous/typo7/fileadmin.htaccess</h2><form method='post'><textarea name='content' class='file-edit'># This file applies Content-Security-Policy (CSP) HTTP headers
# to directories containing (user uploaded) resources like
# /fileadmin/ or /uploads/

&lt;IfModule mod_headers.c&gt;
    # matching requested *.pdf files only (strict rules block Safari showing PDF documents)
    &lt;FilesMatch &quot;\.pdf$&quot;&gt;
        Header set Content-Security-Policy &quot;default-src 'self' 'unsafe-inline'; script-src 'none'; object-src 'self'; plugin-types application/pdf;&quot;
    &lt;/FilesMatch&gt;
    # matching requested *.svg files only (allows using inline styles when serving SVG files)
    &lt;FilesMatch &quot;\.svg&quot;&gt;
        Header set Content-Security-Policy &quot;default-src 'self'; script-src 'none'; style-src 'unsafe-inline'; object-src 'none'; sandbox;&quot;
    &lt;/FilesMatch&gt;
    # matching anything else, using negative lookbehind pattern
    &lt;FilesMatch &quot;(?&lt;!\.(?:pdf|svg))$&quot;&gt;
        Header set Content-Security-Policy &quot;default-src 'self'; script-src 'none'; style-src 'none'; object-src 'none'; sandbox;&quot;
    &lt;/FilesMatch&gt;

    # =================================================================
    # Variations to send CSP header only when it has not be set before.
    # Adjust all `Header set` instructions above
    #     Header set Content-Security-Policy &quot;&lt;directives&gt;&quot;
    # with substitutes shown below
    #
    # -----------------------------------------------------------------
    # a) for Apache 2.4 (having `setifempty`)
    # -----------------------------------------------------------------
    #     Header setifempty Content-Security-Policy &quot;&lt;directives&gt;&quot;
    #
    # -----------------------------------------------------------------
    # b) for Apache 2.2 (using fallbacks)
    # -----------------------------------------------------------------
    #     Header append Content-Security-Policy &quot;&quot;
    #     Header edit Content-Security-Policy &quot;^$&quot; &quot;&lt;directives&gt;&quot;
    #
    # =================================================================
&lt;/IfModule&gt;
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fvar%2Fsoftaculous%2Ftypo7'>Back to Directory</a>