program/lib/Roundcube/rcube_output.php
@@ -1,6 +1,6 @@ <?php /* /** +-----------------------------------------------------------------------+ | This file is part of the Roundcube PHP suite | | Copyright (C) 2005-2014 The Roundcube Dev Team | @@ -190,6 +190,11 @@ // Request browser to disable DNS prefetching (CVE-2010-0464) header("X-DNS-Prefetch-Control: off"); // send CSRF and clickjacking protection headers if ($xframe = $this->app->config->get('x_frame_options', 'sameorigin')) { header('X-Frame-Options: ' . $xframe); } } /**
