michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-08-17 21:00:28 +01:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Specifically allow only local frames, as Chrome on iOS doesn't load framesets without this http://virtualmin.com/node/33332

Browse Source
This commit is contained in:
Jamie Cameron
2014-05-30 21:34:05 -07:00
parent c8702bcda8
commit 822b09c8e1
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web-lib-funcs.pl
View File

@@ -754,7 +754,7 @@ if (!$gconfig{'no_frame_options'}) {
print "X-Frame-Options: SAMEORIGIN\n";
}
if (!$gconfig{'no_content_security_policy'}) {
print "Content-Security-Policy: script-src 'self' 'unsafe-inline'\n";
print "Content-Security-Policy: script-src 'self' 'unsafe-inline'; frame-src 'self'\n";
}
if (defined($_[0])) {
print "Content-type: text/html; Charset=$_[0]\n\n";