gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

No longer need to allow phpmyadmin.net

Browse Source
This commit is contained in:
Marc Delisle 2013-02-12 08:06:53 -05:00
parent 95e948fbfd
commit c758fdae2c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
libraries/header_http.inc.php
View File

@ -24,7 +24,7 @@ if (!$GLOBALS['cfg']['AllowThirdPartyFraming']) {
header('X-Frame-Options: SAMEORIGIN');
header("X-Content-Security-Policy: allow 'self' ; options inline-script eval-script; frame-ancestors 'self'; img-src 'self' data:");
if (PMA_USR_BROWSER_AGENT == 'SAFARI') {
header("X-WebKit-CSP: allow 'self' http://www.phpmyadmin.net; options inline-script eval-script");
header("X-WebKit-CSP: allow 'self'; options inline-script eval-script");
} else {
header("X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'");
}