1
0
mirror of https://github.com/vrana/adminer.git synced 2025-08-15 11:04:02 +02:00

Plugins: Allow changing CSP by more plugins

This commit is contained in:
Jakub Vrana
2025-03-31 20:20:09 +02:00
parent 595c228175
commit 9f3f3b9515
5 changed files with 9 additions and 9 deletions

View File

@@ -86,10 +86,11 @@ class Adminer {
}
/** Get Content Security Policy headers
* @return list<string[]> of arrays with directive name in key, allowed sources in value
* @param list<string[]> $csp of arrays with directive name in key, allowed sources in value
* @return list<string[]> same as $csp
*/
function csp(): array {
return csp();
function csp(array $csp): array {
return $csp;
}
/** Print HTML code inside <head>

View File

@@ -133,7 +133,7 @@ function page_headers(): void {
header("X-XSS-Protection: 0"); // prevents introducing XSS in IE8 by removing safe parts of the page
header("X-Content-Type-Options: nosniff");
header("Referrer-Policy: origin-when-cross-origin");
foreach (adminer()->csp() as $csp) {
foreach (adminer()->csp(csp()) as $csp) {
$header = array();
foreach ($csp as $key => $val) {
$header[] = "$key $val";