tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-28 16:24:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

#8111 Fixed X-Frame-Options

Browse Source
This commit is contained in:
Daniel Maya 2021-10-18 16:36:10 +02:00
parent 704403fd52
commit c8a11543e8
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pandora_console/.htaccess
View File

@ -1,6 +1,9 @@
# pandora disable listing # pandora disable listing
Options -Indexes Options -Indexes
# Avoid clickjacking
Header always append X-Frame-Options SAMEORIGIN
<Files ~ "\.log$"> <Files ~ "\.log$">
Order Allow,Deny Order Allow,Deny
Deny from All Deny from All

2
pandora_console/index.php
View File

@ -220,8 +220,6 @@ echo '<head>'."\n";
// This starts the page head. In the callback function, // This starts the page head. In the callback function,
// $page['head'] array content will be processed into the head. // $page['head'] array content will be processed into the head.
ob_start('ui_process_page_head'); ob_start('ui_process_page_head');
// Avoid clickjacking.
header('X-Frame-Options: SAMEORIGIN');
// Enterprise main. // Enterprise main.
enterprise_include_once('index.php'); enterprise_include_once('index.php');