mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-17 20:01:47 +02:00
Code Issues Releases Wiki Activity

Prevent clickjacking. Remove js/css query string when e_HTTP_STATIC is active.

Browse Source
This commit is contained in:
Cameron
2018-01-18 14:16:43 -08:00
parent c2048c1c2f
commit fb7e9668e7
2 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
class2.php
View File

@@ -2773,6 +2773,7 @@ class e_http_header
}
$this->setHeader('X-Frame-Options: SAMEORIGIN');
// should come after the Etag header
if ($canCache && isset($_SERVER['HTTP_IF_NONE_MATCH']))