mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-05 06:07:32 +02:00
Code Issues Releases Wiki Activity

Prevent clickjacking. Remove js/css query string when e_HTTP_STATIC is active.

Browse Source
This commit is contained in:
Cameron
2018-01-18 14:16:43 -08:00
parent c2048c1c2f
commit fb7e9668e7
2 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
class2.php
View File

@@ -2773,6 +2773,7 @@ class e_http_header
} }
$this->setHeader('X-Frame-Options: SAMEORIGIN');
// should come after the Etag header // should come after the Etag header
if ($canCache && isset($_SERVER['HTTP_IF_NONE_MATCH'])) if ($canCache && isset($_SERVER['HTTP_IF_NONE_MATCH']))

6
e107_handlers/js_manager.php
View File

@@ -1442,9 +1442,8 @@ class e_jsmanager
} }
if(!defined('e_HTTP_STATIC'))
{
if(strpos($path,'?')!==false) if(strpos($path,'?')!==false)
{ {
$path .= "&".$this->getCacheId(); $path .= "&".$this->getCacheId();
@@ -1453,6 +1452,7 @@ class e_jsmanager
{ {
$path .= "?".$this->getCacheId(); $path .= "?".$this->getCacheId();
} }
}
return $path; return $path;