~ubuntu-branches/debian/experimental/phpmyadmin/experimental

« back to all changes in this revision

Viewing changes to libraries/header_http.inc.php

  • Committer: Package Import Robot
  • Author(s): Michal Čihař
  • Date: 2013-03-11 14:11:09 UTC
  • mfrom: (1.4.3)
  • Revision ID: package-import@ubuntu.com-20130311141109-c87yrlb1r20ahcsq
Tags: 4:3.5.7-1
New upstream release.

Show diffs side-by-side

added added

removed removed

Lines of Context:
23
23
if (!$GLOBALS['cfg']['AllowThirdPartyFraming']) {
24
24
    header('X-Frame-Options: SAMEORIGIN');
25
25
    header("X-Content-Security-Policy: allow 'self' ; options inline-script eval-script; frame-ancestors 'self'; img-src 'self' data:");
26
 
    header("X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'");
 
26
    if (PMA_USR_BROWSER_AGENT == 'SAFARI') {
 
27
        header("X-WebKit-CSP: allow 'self'; options inline-script eval-script");
 
28
    } else {
 
29
        header("X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'");
 
30
    }
27
31
}
28
32
PMA_no_cache_header();
29
33
if (!defined('IS_TRANSFORMATION_WRAPPER')) {