mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-07-30 19:30:25 +02:00
Code Issues Releases Wiki Activity

Prevent clickjacking. Remove js/css query string when e_HTTP_STATIC is active.

Browse Source
This commit is contained in:
Cameron
2018-01-18 14:16:43 -08:00
parent c2048c1c2f
commit fb7e9668e7
2 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
class2.php
View File

@@ -2773,6 +2773,7 @@ class e_http_header
}
$this->setHeader('X-Frame-Options: SAMEORIGIN');
// should come after the Etag header
if ($canCache && isset($_SERVER['HTTP_IF_NONE_MATCH']))

18
e107_handlers/js_manager.php
View File

@@ -1442,16 +1442,16 @@ class e_jsmanager
}
if(strpos($path,'?')!==false)
if(!defined('e_HTTP_STATIC'))
{
$path .= "&".$this->getCacheId();
}
else
{
$path .= "?".$this->getCacheId();
if(strpos($path,'?')!==false)
{
$path .= "&".$this->getCacheId();
}
else
{
$path .= "?".$this->getCacheId();
}
}
return $path;