Merge pull request #57133 from nextcloud/fix-template-headers-injection

fix(lib): include headers from OC\Template\Template as well in produced HTML

Author: come-nc

lib/private/Template/Template.php

@@ -122,7 +122,7 @@ public function fetchPage(?array $additionalParams = null): string {
 
 			// Add custom headers
 			$headers = '';
-			foreach (\OC_Util::$headers as $header) {
+			foreach (array_merge(\OC_Util::$headers, $this->headers) as $header) {
 				$headers .= '<' . Util::sanitizeHTML($header['tag']);
 				if (strcasecmp($header['tag'], 'script') === 0 && in_array('src', array_map('strtolower', array_keys($header['attributes'])))) {
 					$headers .= ' defer';