[web-bugs] master: Add X-Frame-Options: SAMEORIGIN
| From: | Sara Golemon | Date: | Mon, 27 Sep 2021 14:42:50 +0000 |
| Subject: | [web-bugs] master: Add X-Frame-Options: SAMEORIGIN | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-29623@lists.php.net to get a copy of this message | ||
Author: Sara Golemon (sgolemon)
Date: 2021-09-27T14:42:13Z
Commit: https://github.com/php/web-bugs/commit/2f06b4d7bb4c42311fb2ac9154f10438b800d697
Raw diff: https://github.com/php/web-bugs/commit/2f06b4d7bb4c42311fb2ac9154f10438b800d697.diff
Add X-Frame-Options: SAMEORIGIN
Changed paths:
M include/functions.php
M templates/layout.php
Diff:
diff --git a/include/functions.php b/include/functions.php
index a2ef5546..b72c2c8c 100644
--- a/include/functions.php
+++ b/include/functions.php
@@ -1514,6 +1514,7 @@ function response_header($title, $extraHeaders = '')
$_header_done = true;
header('Content-Type: text/html; charset=UTF-8');
+ header('X-Frame-Options: SAMEORIGIN');
?>
<!DOCTYPE html>
<html lang="en">
diff --git a/templates/layout.php b/templates/layout.php
index a0eb35f5..35a400e1 100644
--- a/templates/layout.php
+++ b/templates/layout.php
@@ -5,6 +5,7 @@
<title>PHP :: <?= $this->e($title) ?></title>
<link rel="shortcut icon" href="<?= $siteScheme ?>://<?= $siteUrl
?>/images/favicon.ico">
<link rel="stylesheet" href="/css/style.css">
+ <meta http-equiv="X-Frame-Options" content="SAMEORIGIN">
</head>
<body>
<table id="top" class="head" cellspacing="0"
cellpadding="0">