Changeset 2915:c45489df2bde for inc/admin

Timestamp:

01/13/15 08:22:24 (11 years ago)

Author:

Dsls

Branch:

2.7

Tags:

2.7.3

Message:

Last tuning for x-frame-options (inc preview), see #2049

File:

• inc/admin/lib.dc.page.php (modified) (1 diff)

inc/admin/lib.dc.page.php

@@ -930 +930 @@
           if ($origin !== null) {
                $url = parse_url($origin);
-               header(sprintf('X-Frame-Options: %s', is_array($url)?($url['scheme'].'://'.$url['host']):'SAMEORIGIN'));
+               header(sprintf('X-Frame-Options: %s', is_array($url)?("ALLOW-FROM ".$url['scheme'].'://'.$url['host']):'SAMEORIGIN'));
           } else {
                header('X-Frame-Options: SAMEORIGIN'); // FF 3.6.9+ Chrome 4.1+ IE 8+ Safari 4+ Opera 10.5+