diff --git a/ChangeLog b/ChangeLog index 8afd63c029..43e66fc66a 100644 --- a/ChangeLog +++ b/ChangeLog @@ -86,6 +86,7 @@ phpMyAdmin - ChangeLog - issue #13020 Removed warning about client and server versions mismatch - issue Hide comments on table Structure tab when no comment is set - issue Fixed submission of error reports +- issue #13033 Use Referrer-Policy header to specify referrer policy 4.6.6 (2017-01-23) - issue #12759 Fix Notice regarding 'Undefined index: old_usergroup' diff --git a/libraries/Header.php b/libraries/Header.php index 5f49e269a6..8133874579 100644 --- a/libraries/Header.php +++ b/libraries/Header.php @@ -537,6 +537,7 @@ class Header 'X-Frame-Options: DENY' ); } + header('Referrer-Policy: no-referrer'); header( "Content-Security-Policy: default-src 'self' " . $captcha_url @@ -549,7 +550,6 @@ class Header . $captcha_url . $GLOBALS['cfg']['CSPAllow'] . ";" - . "referrer no-referrer;" . "img-src 'self' data: " . $GLOBALS['cfg']['CSPAllow'] . $map_tile_urls