Changeset 3326:6735e0420ee9 for inc/admin/lib.dc.page.php

Timestamp:

08/27/16 12:34:53 (9 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Add a CSP Report only option for admin (see about:config), default → false

File:

• inc/admin/lib.dc.page.php (modified) (1 diff)

inc/admin/lib.dc.page.php

@@ -137 +137 @@
                          $directives[] = "report-uri ".DC_ADMIN_URL."csp_report.php";
                     }
-                    $headers['csp'] = "Content-Security-Policy: ".implode(" ; ",$directives);
+                    $report_only = ($core->blog->settings->system->csp_admin_report_only) ? '-Report-Only' : '';
+                    $headers['csp'] = "Content-Security-Policy".$report_only.": ".implode(" ; ",$directives);
                }
           }