Changeset 2792:08fe3c330258 for inc

Timestamp:

11/15/14 18:48:03 (11 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

Message:

Prevents Clickjacking as far as possible (see https://www.owasp.org/index.php/Clickjacking), thanks Narendra Bhati for reporting this.

File:

inc/admin/lib.dc.page.php

-                      r2788
+                      r2792
           # Display
           header('Content-Type: text/html; charset=UTF-8');
+          // Prevents Clickjacking as far as possible
+          header('X-Frame-Options: SAMEORIGIN'); // FF 3.6.9+ Chrome 4.1+ IE 8+ Safari 4+ Opera 10.5+
           echo
           '<!DOCTYPE html>'.
 …
           # Display
           header('Content-Type: text/html; charset=UTF-8');
+          // Prevents Clickjacking as far as possible
+          header('X-Frame-Options: SAMEORIGIN'); // FF 3.6.9+ Chrome 4.1+ IE 8+ Safari 4+ Opera 10.5+
           echo
           '<!DOCTYPE html>'.

Note: See TracChangeset for help on using the changeset viewer.