nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2025-12-30 00:53:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Security - Add headers for X-Content-Type-Options and Referrer-Policy (#7572)

Browse Source
This commit is contained in:
Alex
2025-10-14 12:43:26 -07:00
committed by GitHub
parent 4eba4ce737
commit 0a07221217
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
resources/require.php
View File

@@ -91,6 +91,9 @@
//security headers
header("X-Frame-Options: SAMEORIGIN");
header("Content-Security-Policy: frame-ancestors 'self';");
header("X-Content-Type-Options: nosniff");
header("Referrer-Policy: strict-origin-when-cross-origin");
//header("Strict-Transport-Security: max-age=63072000; includeSubDomains; preload");
//start the session if not using the command line
global $no_session;