Changeset 17826 for trunk/wp-includes/functions.php

Timestamp:

05/06/2011 09:28:53 PM (12 years ago)

Author:

ryan

Message:

Send X-Frame-Options: SAMEORIGIN for admin and login pages. see #12293

File:

• trunk/wp-includes/functions.php (modified) (1 diff)

trunk/wp-includes/functions.php

@@ -4535 +4535 @@
 }
 
+/**
+ * Send a HTTP header to limit rendering of pages to same origin iframes.
+ *
+ * @link https://developer.mozilla.org/en/the_x-frame-options_response_header
+ *
+ * @since 3.2.0
+ * @return none
+ */
+function send_frame_options_header() {
+    @header( 'X-Frame-Options: SAMEORIGIN' );
+}
+
 ?>