gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Send Content-Security-Policy headers in setup/ app (#17751)

Browse Source 
This pull request adds Content-Security-Policy and other security-related headers to the setup/ application, as requested in #12359.

Fixes #12359

Signed-off-by: Dan Wallis <mrdanwallis@gmail.com>
(cherry picked from commit 6e14811a05)
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
This commit is contained in:
Dan Wallis 2022-10-03 23:27:53 +01:00 committed by Maurício Meneghini Fauth
parent e52ff0e3a7
commit 28443f6723
No known key found for this signature in database
GPG Key ID: 6A16FD38AFC89CC8
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
setup/index.php
View File

@ -10,6 +10,7 @@ use PhpMyAdmin\Controllers\Setup\FormController;
use PhpMyAdmin\Controllers\Setup\HomeController;
use PhpMyAdmin\Controllers\Setup\ServersController;
use PhpMyAdmin\Core;
use PhpMyAdmin\Header;
use PhpMyAdmin\Template;
use PhpMyAdmin\Url;
@ -39,6 +40,9 @@ if (isset($_GET['page']) && in_array($_GET['page'], ['form', 'config', 'servers'
Core::noCacheHeader();
// Sent security-related headers
(new Header())->sendHttpHeaders();
if ($page === 'form') {
echo (new FormController($GLOBALS['ConfigFile'], new Template()))([
'formset' => $_GET['formset'] ?? null,