diff options
| author | Marc Alexander <admin@m-a-styles.de> | 2019-07-20 09:41:55 +0200 |
|---|---|---|
| committer | Marc Alexander <admin@m-a-styles.de> | 2019-07-20 09:43:24 +0200 |
| commit | 30f8e5d638dd7f6d321c152b0eeea6ddf5ed361c (patch) | |
| tree | 994f38704f05ed9b97a9ac3c56bf42123544b4de /phpBB | |
| parent | 9e9bdb69b5e00a4993b7ff9a6021044c9ec0c4dc (diff) | |
| download | forums-30f8e5d638dd7f6d321c152b0eeea6ddf5ed361c.tar forums-30f8e5d638dd7f6d321c152b0eeea6ddf5ed361c.tar.gz forums-30f8e5d638dd7f6d321c152b0eeea6ddf5ed361c.tar.bz2 forums-30f8e5d638dd7f6d321c152b0eeea6ddf5ed361c.tar.xz forums-30f8e5d638dd7f6d321c152b0eeea6ddf5ed361c.zip | |
[ticket/16101] Add Referrer-Policy header to phpBB's headers
PHPBB3-16101
Diffstat (limited to 'phpBB')
| -rw-r--r-- | phpBB/includes/functions.php | 3 | ||||
| -rw-r--r-- | phpBB/includes/functions_acp.php | 3 |
2 files changed, 4 insertions, 2 deletions
diff --git a/phpBB/includes/functions.php b/phpBB/includes/functions.php index 5234c3472d..73d333bd7e 100644 --- a/phpBB/includes/functions.php +++ b/phpBB/includes/functions.php @@ -4592,12 +4592,13 @@ function page_header($page_title = '', $display_online_list = false, $item_id = if ($send_headers) { - // An array of http headers that phpbb will set. The following event may override these. + // An array of http headers that phpBB will set. The following event may override these. $http_headers += array( // application/xhtml+xml not used because of IE 'Content-type' => 'text/html; charset=UTF-8', 'Cache-Control' => 'private, no-cache="set-cookie"', 'Expires' => gmdate('D, d M Y H:i:s', time()) . ' GMT', + 'Referrer-Policy' => 'strict-origin-when-cross-origin', ); if (!empty($user->data['is_bot'])) { diff --git a/phpBB/includes/functions_acp.php b/phpBB/includes/functions_acp.php index dd326c3db6..a2014a7d5b 100644 --- a/phpBB/includes/functions_acp.php +++ b/phpBB/includes/functions_acp.php @@ -112,12 +112,13 @@ function adm_page_header($page_title) 'CONTAINER_EXCEPTION' => $phpbb_container->hasParameter('container_exception') ? $phpbb_container->getParameter('container_exception') : false, )); - // An array of http headers that phpbb will set. The following event may override these. + // An array of http headers that phpBB will set. The following event may override these. $http_headers = array( // application/xhtml+xml not used because of IE 'Content-type' => 'text/html; charset=UTF-8', 'Cache-Control' => 'private, no-cache="set-cookie"', 'Expires' => gmdate('D, d M Y H:i:s', time()) . ' GMT', + 'Referrer-Policy' => 'strict-origin-when-cross-origin', ); /** |