Adjust content security policy

This commit is contained in:
Marcus Hill
2023-06-17 16:13:02 +01:00
parent 95cd0ebdc8
commit a966bf0282
11 changed files with 17 additions and 26 deletions

View File

@@ -4,9 +4,7 @@
* Landing / Home page for the client portal
*/
header("Content-Security-Policy: default-src 'self' https: fonts.googleapis.com");
header("X-Frame-Options: DENY");
header("Content-Security-Policy: default-src 'self' fonts.googleapis.com fonts.gstatic.com");
$session_company_id = 1;
require_once('../config.php');
@@ -162,19 +160,15 @@ if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['login'])) {
<!-- jQuery -->
<script src="../plugins/jquery/jquery.min.js"></script>
<!-- Bootstrap 4 -->
<script src="../plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
<!-- AdminLTE App -->
<script src="../dist/js/adminlte.min.js"></script>
<script src="../plugins/Show-Hide-Passwords-Bootstrap-4/bootstrap-show-password.min.js"></script>
<!-- Prevents resubmit on refresh or back -->
<script>
if (window.history.replaceState) {
window.history.replaceState(null,null,window.location.href);
}
</script>
<script src="../js/login_prevent_resubmit.js"></script>
</body>
</html>