mirror of
https://github.com/vrana/adminer.git
synced 2025-08-15 11:04:02 +02:00
Plugins: Allow changing CSP by more plugins
This commit is contained in:
@@ -86,10 +86,11 @@ class Adminer {
|
||||
}
|
||||
|
||||
/** Get Content Security Policy headers
|
||||
* @return list<string[]> of arrays with directive name in key, allowed sources in value
|
||||
* @param list<string[]> $csp of arrays with directive name in key, allowed sources in value
|
||||
* @return list<string[]> same as $csp
|
||||
*/
|
||||
function csp(): array {
|
||||
return csp();
|
||||
function csp(array $csp): array {
|
||||
return $csp;
|
||||
}
|
||||
|
||||
/** Print HTML code inside <head>
|
||||
|
@@ -133,7 +133,7 @@ function page_headers(): void {
|
||||
header("X-XSS-Protection: 0"); // prevents introducing XSS in IE8 by removing safe parts of the page
|
||||
header("X-Content-Type-Options: nosniff");
|
||||
header("Referrer-Policy: origin-when-cross-origin");
|
||||
foreach (adminer()->csp() as $csp) {
|
||||
foreach (adminer()->csp(csp()) as $csp) {
|
||||
$header = array();
|
||||
foreach ($csp as $key => $val) {
|
||||
$header[] = "$key $val";
|
||||
|
Reference in New Issue
Block a user