1
0
mirror of https://github.com/e107inc/e107.git synced 2025-01-17 12:48:24 +01:00

Issue #3101 Added option define('X-FRAME-SAMEORIGIN', false); for e107_config.php

This commit is contained in:
Cameron 2018-08-03 17:14:39 -07:00
parent 86c866b6c4
commit 5f11415fbf

View File

@ -2793,8 +2793,10 @@ class e_http_header
$this->setHeader('Vary: Accept');
}
$this->setHeader('X-Frame-Options: SAMEORIGIN');
if(defset('X-FRAME-SAMEORIGIN') !== false)
{
$this->setHeader('X-Frame-Options: SAMEORIGIN');
}
// should come after the Etag header
if ($canCache && isset($_SERVER['HTTP_IF_NONE_MATCH']))