]> git.joonet.de Git - adminer.git/commitdiff
Uses own XSS protection
authorJakub Vrana <jakub@vrana.cz>
Wed, 20 Oct 2010 20:27:51 +0000 (22:27 +0200)
committerJakub Vrana <jakub@vrana.cz>
Wed, 20 Oct 2010 20:27:51 +0000 (22:27 +0200)
adminer/include/adminer.inc.php
editor/include/adminer.inc.php

index ce13b8ca61e6e5f2b5cc37d71d870ae4fc5169ab..e314b5936d47210d1f5e7e29aaf5ad027fbdcbe1 100644 (file)
@@ -37,6 +37,7 @@ class Adminer {
        */
        function headers() {
                header("X-Frame-Options: deny"); // ClickJacking protection in IE8, Safari 4, Chrome 2, Firefox NoScript plugin
+               header("X-XSS-Protection: 0"); // prevents introducing XSS in IE8 by removing safe parts of the page
        }
        
        /** Print login form
index 71209989fb179815a738c13840291c8e468193ac..501fb935db97fbb57018db55db9b1c75c95f22a0 100644 (file)
@@ -28,6 +28,7 @@ class Adminer {
        
        function headers() {
                header("X-Frame-Options: deny");
+               header("X-XSS-Protection: 0");
        }
        
        function loginForm() {