2016-11-15 18:38:26 +00:00
|
|
|
<?php
|
|
|
|
|
|
|
|
|
|
/** Allow using Adminer inside a frame (disables ClickJacking protection)
|
|
|
|
|
* @link https://www.adminer.org/plugins/#use
|
2017-05-07 17:54:08 +00:00
|
|
|
* @author Jakub Vrana, https://www.vrana.cz/
|
2016-11-15 18:38:26 +00:00
|
|
|
* @license http://www.apache.org/licenses/LICENSE-2.0 Apache License, Version 2.0
|
|
|
|
|
* @license http://www.gnu.org/licenses/gpl-2.0.html GNU General Public License, version 2 (one or other)
|
|
|
|
|
*/
|
|
|
|
|
class AdminerFrames {
|
|
|
|
|
/** @access protected */
|
|
|
|
|
var $sameOrigin;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* @param bool allow running from the same origin only
|
|
|
|
|
*/
|
|
|
|
|
function __construct($sameOrigin = false) {
|
|
|
|
|
$this->sameOrigin = $sameOrigin;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function headers() {
|
|
|
|
|
if ($this->sameOrigin) {
|
|
|
|
|
header("X-Frame-Options: SameOrigin");
|
|
|
|
|
}
|
|
|
|
|
header("X-XSS-Protection: 0");
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
}
|
