From c27d47ed75dd723a29104dc5b4707d0afebc8089 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Mon, 27 Feb 2017 11:39:54 +0100 Subject: [PATCH] Use Referrer-Policy header to specify referrer policy MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The referrer policy in Content-Security-Policy is deprecated. Fixes #13033 Signed-off-by: Michal Čihař --- ChangeLog | 1 + libraries/Header.php | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 8afd63c029..43e66fc66a 100644 --- a/ChangeLog +++ b/ChangeLog @@ -86,6 +86,7 @@ phpMyAdmin - ChangeLog - issue #13020 Removed warning about client and server versions mismatch - issue Hide comments on table Structure tab when no comment is set - issue Fixed submission of error reports +- issue #13033 Use Referrer-Policy header to specify referrer policy 4.6.6 (2017-01-23) - issue #12759 Fix Notice regarding 'Undefined index: old_usergroup' diff --git a/libraries/Header.php b/libraries/Header.php index 5f49e269a6..8133874579 100644 --- a/libraries/Header.php +++ b/libraries/Header.php @@ -537,6 +537,7 @@ class Header 'X-Frame-Options: DENY' ); } + header('Referrer-Policy: no-referrer'); header( "Content-Security-Policy: default-src 'self' " . $captcha_url @@ -549,7 +550,6 @@ class Header . $captcha_url . $GLOBALS['cfg']['CSPAllow'] . ";" - . "referrer no-referrer;" . "img-src 'self' data: " . $GLOBALS['cfg']['CSPAllow'] . $map_tile_urls