nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2025-12-30 00:53:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add security headers for non-CLI execution

Browse Source 
Add security headers conditionally for non-CLI requests
This commit is contained in:
FusionPBX
2025-10-15 21:43:14 -06:00
committed by GitHub
parent 2023e40d99
commit 1a221e0310
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
resources/require.php
View File

@@ -89,11 +89,13 @@
$database = database::new(['config' => $config]);
//security headers
header("X-Frame-Options: SAMEORIGIN");
header("Content-Security-Policy: frame-ancestors 'self';");
header("X-Content-Type-Options: nosniff");
header("Referrer-Policy: strict-origin-when-cross-origin");
//header("Strict-Transport-Security: max-age=63072000; includeSubDomains; preload");
if (!defined('STDIN')) {
header("X-Frame-Options: SAMEORIGIN");
header("Content-Security-Policy: frame-ancestors 'self';");
header("X-Content-Type-Options: nosniff");
header("Referrer-Policy: strict-origin-when-cross-origin");
//header("Strict-Transport-Security: max-age=63072000; includeSubDomains; preload");
}
//start the session if not using the command line
global $no_session;