Changeset 3509:652d583aa806 for inc

Timestamp:

01/08/17 11:16:52 (9 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Add current blog domain for script and style CSP directives (useful for iframe editing via editor)

File:

• inc/admin/lib.dc.page.php (modified) (1 diff)

inc/admin/lib.dc.page.php

@@ -124 +124 @@
                if (!is_null($core->blog->host)) {
                     $csp['default-src'] .= ' '.parse_url($core->blog->host,PHP_URL_HOST);
+                    $csp['script-src'] .= ' '.parse_url($core->blog->host,PHP_URL_HOST);
+                    $csp['style-src'] .= ' '.parse_url($core->blog->host,PHP_URL_HOST);
                }
                # Cope with media display in media manager (via public URL)