From c28c5d29a3c61bc8110c11349e3f2309cd537cfa Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Fri, 12 Apr 2019 17:20:45 +0300
Subject: [PATCH] setting content type to fix possible XSS attack vector

---
 web/file_manager/fm_api.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/file_manager/fm_api.php b/web/file_manager/fm_api.php
index ac5faa3a..cf4eef82 100644
--- a/web/file_manager/fm_api.php
+++ b/web/file_manager/fm_api.php
@@ -1,8 +1,8 @@
 <?php
-
 // Init
 //error_reporting(NULL);
 
+header('Content-Type: application/json');
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 include($_SERVER['DOCUMENT_ROOT']."/file_manager/fm_core.php");