From c758fdae2c918f4cecf0c21cd77c0860a81d1004 Mon Sep 17 00:00:00 2001 From: Marc Delisle Date: Tue, 12 Feb 2013 08:06:53 -0500 Subject: [PATCH] No longer need to allow phpmyadmin.net --- libraries/header_http.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libraries/header_http.inc.php b/libraries/header_http.inc.php index c2d59b5139..818185137d 100644 --- a/libraries/header_http.inc.php +++ b/libraries/header_http.inc.php @@ -24,7 +24,7 @@ if (!$GLOBALS['cfg']['AllowThirdPartyFraming']) { header('X-Frame-Options: SAMEORIGIN'); header("X-Content-Security-Policy: allow 'self' ; options inline-script eval-script; frame-ancestors 'self'; img-src 'self' data:"); if (PMA_USR_BROWSER_AGENT == 'SAFARI') { - header("X-WebKit-CSP: allow 'self' http://www.phpmyadmin.net; options inline-script eval-script"); + header("X-WebKit-CSP: allow 'self'; options inline-script eval-script"); } else { header("X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'"); }