Commit Graph

12 Commits

Author SHA1 Message Date
ninadsp
bed1948d04 testing git setup - no major change made in code yet
only added a few comments
2010-05-23 01:22:01 +05:30
Michal Čihař
2154120e3a [core] Include Content Security Policy HTTP headers.
See <https://wiki.mozilla.org/Security/CSP/Specification> for more
details. I hope current rule is flexible enough to avoid impact on
existing functionality.
2010-04-25 16:51:53 +02:00
Michal Čihař
88af8f2779 Use X-Frame-Options header to protect against ClickJacking. 2010-01-13 13:03:56 +00:00
Michal Čihař
56941e509c Adding @package, second part. 2008-11-24 11:05:40 +00:00
Marc Delisle
afbb2a9dc2 protection against XSS when register_globals is on and .htaccess has no effect 2008-06-21 15:01:27 +00:00
Sebastian Mendel
374abd5173 fixed/added page level docblock 2007-03-20 10:32:13 +00:00
Sebastian Mendel
817e790762 synced/fixed vim line 2007-03-19 17:55:39 +00:00
Michal Čihař
05c719aba3 Fix XSS on some libraries (CVE-2005-3665). 2005-11-24 08:15:00 +00:00
Michal Čihař
94355887ce Use define rather than variable for conditional paths. 2005-11-15 11:14:17 +00:00
Michal Čihař
0ccc8c8611 Allways send text/html content type. 2005-11-15 11:02:08 +00:00
Michal Čihař
928a8b33db Be valid XHTML 2004-04-27 12:36:12 +00:00
Michal Čihař
6884f9701a no more support for php3 2003-11-18 15:20:45 +00:00