Changeset 17826 for trunk/wp-includes/default-filters.php

Timestamp:

05/06/2011 09:28:53 PM (12 years ago)

Author:

ryan

Message:

Send X-Frame-Options: SAMEORIGIN for admin and login pages. see #12293

File:

• trunk/wp-includes/default-filters.php (modified) (2 diffs)

trunk/wp-includes/default-filters.php

@@ -216 +216 @@
 add_action( 'login_head',          'wp_print_head_scripts',         9     );
 add_action( 'login_footer',        'wp_print_footer_scripts'              );
+add_action( 'login_form',          'send_frame_options_header',     10, 0 );
 
 // Feed Generator Tags
@@ -249 +250 @@
 add_action( 'before_wp_tiny_mce',         'wp_print_editor_js'             );
 add_action( 'after_wp_tiny_mce',          'wp_preload_dialogs',      10, 1 );
+add_action( 'admin_init',                 'send_frame_options_header', 10, 0 );
 
 // Navigation menu actions