1
0
mirror of https://github.com/vrana/adminer.git synced 2025-08-11 09:04:02 +02:00

Use Referrer-Policy instead of <meta name="referrer">

To make securityheaders.io happy.

Also fix a typo in the value (https://lists.w3.org/Archives/Public/public-webappsec/2015May/0059.html).
This commit is contained in:
Jakub Vrana
2018-01-09 11:01:37 +01:00
parent 3de101dff4
commit d07b7e3773
2 changed files with 2 additions and 1 deletions

View File

@@ -22,6 +22,7 @@ class AdminerFrames {
header("X-Frame-Options: SameOrigin");
}
header("X-XSS-Protection: 0");
header("Referrer-Policy: origin-when-cross-origin");
return false;
}