Add P3P headers to avoid potential issues with IE
This commit is contained in:
@@ -128,6 +128,18 @@ class Response extends Base
|
|||||||
return $this;
|
return $this;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Add P3P headers for Internet Explorer
|
||||||
|
*
|
||||||
|
* @access public
|
||||||
|
* @return $this
|
||||||
|
*/
|
||||||
|
public function withP3P()
|
||||||
|
{
|
||||||
|
$this->withHeader('P3P', 'CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"');
|
||||||
|
return $this;
|
||||||
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Set HTTP response body
|
* Set HTTP response body
|
||||||
*
|
*
|
||||||
|
|||||||
@@ -32,6 +32,7 @@ class BootstrapMiddleware extends BaseMiddleware
|
|||||||
{
|
{
|
||||||
$this->response->withContentSecurityPolicy($this->container['cspRules']);
|
$this->response->withContentSecurityPolicy($this->container['cspRules']);
|
||||||
$this->response->withSecurityHeaders();
|
$this->response->withSecurityHeaders();
|
||||||
|
$this->response->withP3P();
|
||||||
|
|
||||||
if (ENABLE_XFRAME) {
|
if (ENABLE_XFRAME) {
|
||||||
$this->response->withXframe();
|
$this->response->withXframe();
|
||||||
|
|||||||
Reference in New Issue
Block a user