--- a/mod_http_upload_external/share.php	Sun Apr 01 23:24:33 2018 +0200
+++ b/mod_http_upload_external/share.php	Mon Apr 02 10:52:32 2018 +0100
@@ -104,6 +104,9 @@
 		header('Content-Disposition: attachment');
 		header('Content-Type: application/octet-stream');
 		header('Content-Length: '.filesize($store_file_name));
+		header('Content-Security-Policy: "default-src \'none\'"');
+		header('X-Content-Security-Policy: "default-src \'none\'"');
+		header('X-WebKit-CSP: "default-src 'none'"');
 		if($request_method !== 'HEAD') {
 			readfile($store_file_name);
 		}