mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-07-31 20:00:37 +02:00
Code Issues Releases Wiki Activity

Prevent clickjacking. Remove js/css query string when e_HTTP_STATIC is active.

Browse Source
This commit is contained in:
Cameron
2018-01-18 14:16:43 -08:00
parent c2048c1c2f
commit fb7e9668e7
2 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
class2.php
View File

@@ -2773,6 +2773,7 @@ class e_http_header
} }
$this->setHeader('X-Frame-Options: SAMEORIGIN');
// should come after the Etag header // should come after the Etag header
if ($canCache && isset($_SERVER['HTTP_IF_NONE_MATCH'])) if ($canCache && isset($_SERVER['HTTP_IF_NONE_MATCH']))

18
e107_handlers/js_manager.php
View File

@@ -1442,16 +1442,16 @@ class e_jsmanager
} }
if(!defined('e_HTTP_STATIC'))
if(strpos($path,'?')!==false)
{ {
$path .= "&".$this->getCacheId(); if(strpos($path,'?')!==false)
} {
else $path .= "&".$this->getCacheId();
{ }
$path .= "?".$this->getCacheId(); else
{
$path .= "?".$this->getCacheId();
}
} }
return $path; return $path;