viscous/espocrm
1
0
Fork 0
mirror of https://github.com/espocrm/espocrm.git synced 2026-06-28 06:56:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

clientXFrameOptionsHeaderDisabled

Browse Source
This commit is contained in:
Yuri Kuznetsov
2022-12-01 12:28:04 +02:00
parent b02e1218ee
commit cf0e5bb328
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
application/Espo/Core/Utils/ClientManager.php
View File

@@ -104,13 +104,22 @@ class ClientManager
return;
}
$response->setHeader('X-Frame-Options', 'SAMEORIGIN');
$response->setHeader('X-Content-Type-Options', 'nosniff');
$this->writeXFrameOptionsHeader($response);
$this->writeContentSecurityPolicyHeader($response);
$this->writeStrictTransportSecurityHeader($response);
}
private function writeXFrameOptionsHeader(Response $response): void
{
if ($this->config->get('clientXFrameOptionsHeaderDisabled')) {
return;
}
$response->setHeader('X-Frame-Options', 'SAMEORIGIN');
}
private function writeContentSecurityPolicyHeader(Response $response): void
{
if ($this->config->get('clientCspDisabled')) {