Dotclear


Ignore:
Timestamp:
11/15/14 18:48:03 (11 years ago)
Author:
franck <carnet.franck.paul@…>
Branch:
default
Message:

Prevents Clickjacking as far as possible (see  https://www.owasp.org/index.php/Clickjacking), thanks Narendra Bhati for reporting this.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • admin/install/wizard.php

    r2787 r2792  
    136136 
    137137header('Content-Type: text/html; charset=UTF-8'); 
     138 
     139// Prevents Clickjacking as far as possible 
     140header('X-Frame-Options: SAMEORIGIN'); // FF 3.6.9+ Chrome 4.1+ IE 8+ Safari 4+ Opera 10.5+ 
     141 
    138142?> 
    139143<!DOCTYPE html> 
Note: See TracChangeset for help on using the changeset viewer.

Sites map