Security - Add headers for X-Content-Type-Options and Referrer-Policy (#7571)

This commit is contained in:
Alex
2025-10-14 12:43:06 -07:00
committed by GitHub
parent 8c82c7077b
commit 80a84c69f1

View File

@@ -91,6 +91,9 @@
//security headers
header("X-Frame-Options: SAMEORIGIN");
header("Content-Security-Policy: frame-ancestors 'self';");
header("X-Content-Type-Options: nosniff");
header("Referrer-Policy: strict-origin-when-cross-origin");
//header("Strict-Transport-Security: max-age=63072000; includeSubDomains; preload");
//start the session if not using the command line
global $no_session;