mirror/php-adminer
1
0
Fork 0
mirror of https://github.com/vrana/adminer.git synced 2025-08-15 02:54:28 +02:00
Code Issues Releases Wiki Activity

Add Content Security Policy

Browse Source
This commit is contained in:
Jakub Vrana
2018-01-09 18:10:38 +01:00
parent 552d2a6be4
commit e614ae08c4
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
adminer/include/design.inc.php
View File

@@ -91,6 +91,7 @@ function page_headers() {
header("X-XSS-Protection: 0"); // prevents introducing XSS in IE8 by removing safe parts of the page header("X-XSS-Protection: 0"); // prevents introducing XSS in IE8 by removing safe parts of the page
header("X-Content-Type-Options: nosniff"); header("X-Content-Type-Options: nosniff");
header("Referrer-Policy: origin-when-cross-origin"); header("Referrer-Policy: origin-when-cross-origin");
header("Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self'; frame-src https://www.adminer.org; form-action 'self'");
$adminer->headers(); $adminer->headers();
} }

1
changes.txt
View File

@@ -1,4 +1,5 @@
Adminer 4.3.2-dev: Adminer 4.3.2-dev:
Add Content Security Policy
Add nosniff header Add nosniff header
PHP 7.1: Prevent warning when using empty limit PHP 7.1: Prevent warning when using empty limit
MySQL: Remove dedicated view for replication status (added in 4.3.0) MySQL: Remove dedicated view for replication status (added in 4.3.0)