Enable Content-Security-Policy.

operasoftware · Feb 27, 2017 · a7c9306 · a7c9306
1 parent 7d8852d
commit a7c9306
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/templates/base.php b/templates/base.php
@@ -16,6 +16,7 @@
 ##
 $web_config = $this->get('web_config');
 header('X-Frame-Options: DENY');
+header("Content-Security-Policy: default-src 'self'");
 ?>
 <!DOCTYPE html>
 <meta charset="utf-8"/>