1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-24 00:45:52 +00:00

- Add upstream simplified clickjacking patch and bump PORTREVISION

Approved by:	maintainer(implicity)
This commit is contained in:
Wen Heping 2011-01-06 03:08:02 +00:00
parent 7455c81eea
commit 8a1326bc0f
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=267445
4 changed files with 23 additions and 1 deletions

View File

@ -7,6 +7,7 @@
PORTNAME= mediawiki
PORTVERSION= 1.15.5
PORTREVISION= 1
CATEGORIES= www
MASTER_SITES= http://dumps.wikimedia.org/mediawiki/1.15/

View File

@ -1,3 +1,2 @@
MD5 (mediawiki-1.15.5.tar.gz) = 01c4c85fb96991d962c8acb3d892ec2d
SHA256 (mediawiki-1.15.5.tar.gz) = f838c94af81e018dcf11f77674d2a363e97b8832d0d66416294fd301db720ab5
SIZE (mediawiki-1.15.5.tar.gz) = 11595008

View File

@ -0,0 +1,10 @@
--- config/index.php.orig 2011-01-06 10:44:27.000000000 +0800
+++ config/index.php 2011-01-06 10:44:59.000000000 +0800
@@ -21,6 +21,7 @@
error_reporting( E_ALL );
header( "Content-type: text/html; charset=utf-8" );
+header( 'X-Frame-Options: DENY' );
@ini_set( "display_errors", true );
# In case of errors, let output be clean.

View File

@ -0,0 +1,12 @@
--- includes/OutputPage.php.orig 2011-01-06 10:46:14.000000000 +0800
+++ includes/OutputPage.php 2011-01-06 10:47:53.000000000 +0800
@@ -957,6 +957,9 @@
$wgRequest->response()->header( "Content-type: $wgMimeType; charset={$wgOutputEncoding}" );
$wgRequest->response()->header( 'Content-language: '.$wgContLanguageCode );
+ # To prevent clickjacking, do not allow this page to be inside a frame.
+ $wgRequest->response()->header( 'X-Frame-Options: DENY' );
+
if ($this->mArticleBodyOnly) {
$this->out($this->mBodytext);
} else {