Changeset 18013 for branches/3.1/wp-includes/functions.php

Timestamp:

05/24/2011 03:29:12 PM (13 years ago)

Author:

ryan

Message:

Send X-Frame-Options: SAMEORIGIN for admin and login pages. see #12293

File:

• branches/3.1/wp-includes/functions.php (modified) (1 diff)

branches/3.1/wp-includes/functions.php

@@ -4483 +4483 @@
 }
 
+/**
+ * Send a HTTP header to limit rendering of pages to same origin iframes.
+ *
+ * @link https://developer.mozilla.org/en/the_x-frame-options_response_header
+ *
+ * @since 3.2.0
+ * @return none
+ */
+function send_frame_options_header() {
+    @header( 'X-Frame-Options: SAMEORIGIN' );
+}
+
 ?>