maketank/Froxlor
2
0
Fork 0
Code Pull Requests Releases Activity

removed deprecated/old x-xss-protection http-header

Browse Source 
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
This commit is contained in:
Michael Kaufmann
2023-10-25 15:03:57 +02:00
parent 6ee990af0a
commit 77bcd10729
1 changed files with 0 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/Froxlor/UI/Panel/UI.php
View File

@@ -142,8 +142,6 @@ class UI
header("X-Content-Security-Policy: " . $csp_content); header("X-Content-Security-Policy: " . $csp_content);
header("X-WebKit-CSP: " . $csp_content); header("X-WebKit-CSP: " . $csp_content);
header("X-XSS-Protection: 1; mode=block");
// Don't allow to load Froxlor in an iframe to prevent i.e. clickjacking // Don't allow to load Froxlor in an iframe to prevent i.e. clickjacking
header("X-Frame-Options: DENY"); header("X-Frame-Options: DENY");