diff --git a/adminer/include/design.inc.php b/adminer/include/design.inc.php index bd63286e..76562d14 100644 --- a/adminer/include/design.inc.php +++ b/adminer/include/design.inc.php @@ -2,6 +2,7 @@ function page_header($title, $error = "", $breadcrumb = array(), $title2 = "") { global $LANG, $VERSION, $adminer; header("Content-Type: text/html; charset=utf-8"); + header("X-Frame-Options: deny"); // ClickJacking protection in IE8, Safari 4, Chrome 2, NoScript plugin $title_all = $title . (strlen($title2) ? ": " . h($title2) : ""); ?> diff --git a/changes.txt b/changes.txt index 9c27f336..4eef390b 100644 --- a/changes.txt +++ b/changes.txt @@ -3,6 +3,7 @@ Display table links above table structure Fix removed default in ALTER Display whitespace in texts (bug #2858042) Display number of manipulated rows in JS confirm +ClickJacking protection in modern browsers E-mail attachments (Editor) Optional year in date (Editor) Search operators (Editor)