extern/egroupware_official
1
0
Fork 0
mirror of https://github.com/EGroupware/egroupware.git synced 2024-11-16 21:13:23 +01:00
Code Issues Packages Projects Releases Wiki Activity

need to query all apps for CSP frame-sources, as they need to be set on top-level window/document

Browse Source
This commit is contained in:
Ralf Becker 2015-03-13 12:51:59 +00:00
parent 6de6869c8c
commit 857baddc2c
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
phpgwapi/inc/class.egw_framework.inc.php
View File

@ -205,9 +205,12 @@ abstract class egw_framework
if (!isset(self::$csp_frame_src_attrs) && !isset($set)) if (!isset(self::$csp_frame_src_attrs) && !isset($set))
{ {
$frame_src = array('manual.egroupware.org', 'www.egroupware.org'); $frame_src = array('manual.egroupware.org', 'www.egroupware.org');
if (($additional = $GLOBALS['egw']->hooks->single('csp-frame-src', $GLOBALS['egw_info']['flags']['currentapp']))) if (($app_additional = $GLOBALS['egw']->hooks->process('csp-frame-src')))
{ {
$frame_src = array_unique(array_merge($frame_src, $additional)); foreach($app_additional as $addtional)
{
if ($addtional) $frame_src = array_unique(array_merge($frame_src, $addtional));
}
} }
return self::csp_frame_src_attrs($frame_src); return self::csp_frame_src_attrs($frame_src);
} }