need to query all apps for CSP frame-sources, as they need to be set on top-level window/document

This commit is contained in:
Ralf Becker 2015-03-13 12:51:59 +00:00
parent 6de6869c8c
commit 857baddc2c

View File

@ -205,9 +205,12 @@ abstract class egw_framework
if (!isset(self::$csp_frame_src_attrs) && !isset($set))
{
$frame_src = array('manual.egroupware.org', 'www.egroupware.org');
if (($additional = $GLOBALS['egw']->hooks->single('csp-frame-src', $GLOBALS['egw_info']['flags']['currentapp'])))
if (($app_additional = $GLOBALS['egw']->hooks->process('csp-frame-src')))
{
$frame_src = array_unique(array_merge($frame_src, $additional));
foreach($app_additional as $addtional)
{
if ($addtional) $frame_src = array_unique(array_merge($frame_src, $addtional));
}
}
return self::csp_frame_src_attrs($frame_src);
}