Changeset 2792:08fe3c330258 for admin/auth.php

Timestamp:

11/15/14 18:48:03 (11 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

Message:

Prevents Clickjacking as far as possible (see https://www.owasp.org/index.php/Clickjacking), thanks Narendra Bhati for reporting this.

File:

admin/auth.php

-                      r2787
+                      r2792
 header('Content-Type: text/html; charset=UTF-8');
+// Prevents Clickjacking as far as possible
+header('X-Frame-Options: SAMEORIGIN'); // FF 3.6.9+ Chrome 4.1+ IE 8+ Safari 4+ Opera 10.5+
 ?>
 <!DOCTYPE html>

Note: See TracChangeset for help on using the changeset viewer.