Add "X-Frame-Options: SAMEORIGIN" to all pages. Fixes #1850.

This commit is contained in:
Bharat Mediratta
2012-05-05 21:24:25 -07:00
parent fd15295642
commit b839be36bf
2 changed files with 2 additions and 0 deletions

View File

@@ -1,4 +1,5 @@
<?php defined("SYSPATH") or die("No direct script access.") ?>
<?php header("X-Frame-Options: SAMEORIGIN"); ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" <?= $theme->html_attributes() ?> xml:lang="en" lang="en">