tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-28 08:14:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'ent-7139-clickjacking' into 'develop'

Browse Source 
Avoiding clickjacking

Closes pandora_enterprise#7139

See merge request artica/pandorafms!4013
This commit is contained in:
Daniel Rodriguez 2021-05-11 09:45:08 +00:00
commit 128f67b058
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pandora_console/index.php
View File

@ -220,7 +220,8 @@ echo '<head>'."\n";
// This starts the page head. In the callback function, // This starts the page head. In the callback function,
// $page['head'] array content will be processed into the head. // $page['head'] array content will be processed into the head.
ob_start('ui_process_page_head'); ob_start('ui_process_page_head');
// Avoid clickjacking.
header('X-Frame-Options: SAMEORIGIN');
// Enterprise main. // Enterprise main.
enterprise_include_once('index.php'); enterprise_include_once('index.php');