mirror/FreshRSS
0
0
Fork 0
mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-05-14 10:13:52 -04:00
Code Issues Packages Projects Releases Wiki Activity

Referrer-Policy: same-origin (#6303)

Browse Source 
* Referrer-Policy: same-origin

* same-origin for our own images

---------

Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
This commit is contained in:
maTh
2025-04-01 12:23:56 +02:00
committed by GitHub
parent 238d5a48e4
commit 1f624bc5e2
4 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
app/install.php
View File

@@ -5,6 +5,7 @@ if (function_exists('opcache_reset')) {
opcache_reset();
}
header("Content-Security-Policy: default-src 'self'");
header('Referrer-Policy: same-origin');
require(LIB_PATH . '/lib_install.php');

1
lib/lib_rss.php
View File

@@ -981,6 +981,7 @@ function errorMessageInfo(string $errorTitle, string $error = ''): string {
}
header("Content-Security-Policy: default-src 'self'");
header('Referrer-Policy: same-origin');
return <<<MSG
<!DOCTYPE html><html><header><title>HTTP 500: {$errorTitle}</title></header><body>

1
p/.htaccess
View File

@@ -41,6 +41,7 @@ AddDefaultCharset UTF-8
Header merge Cache-Control "public"
</FilesMatch>
Header edit Set-Cookie ^(.*)$ "$1; SameSite=Lax"
Header set Referrer-Policy "same-origin"
</IfModule>
# Provide the true IP address of the connection (e.g. last proxy), even when using mod_remoteip

1
p/ext.php
View File

@@ -112,6 +112,7 @@ if (!is_valid_path($absolute_filename)) {
$content_type = SUPPORTED_TYPES[$file_type];
header("Content-Type: {$content_type}");
header("Content-Disposition: inline; filename='{$file_name}'");
header('Referrer-Policy: same-origin');
$mtime = @filemtime($absolute_filename);
if ($mtime === false) {