1
0
mirror of https://github.com/billz/raspap-webgui.git synced 2023-10-10 13:37:24 +02:00

Merge feature branch. Fixes #210 & #217. Thanks @D9ping

This commit is contained in:
billz 2018-08-02 12:36:55 +00:00
commit 417f11ea1a
2 changed files with 13 additions and 3 deletions

View File

@ -1,4 +1,14 @@
<?php <?php
require_once 'config.php';
require_once RASPI_CONFIG.'/raspap.php';
session_start();
header('X-Frame-Options: SAMEORIGIN');
header("Content-Security-Policy: default-src 'none'; frame-src 'self'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'");
require_once 'authenticate.php';
// Web Console v0.9.7 (2016-11-05) // Web Console v0.9.7 (2016-11-05)
// //
// Author: Nickolay Kovalev (http://nickola.ru) // Author: Nickolay Kovalev (http://nickola.ru)

View File

@ -51,10 +51,10 @@ if(!isset($_COOKIE['theme'])) {
} else { } else {
$theme = $_COOKIE['theme']; $theme = $_COOKIE['theme'];
} }
$theme_url = 'dist/css/' . $theme;
?>
<!DOCTYPE html> $theme_url = 'dist/css/'.htmlspecialchars($theme, ENT_QUOTES);
?><!DOCTYPE html>
<html lang="en"> <html lang="en">
<head> <head>
<meta charset="utf-8"> <meta charset="utf-8">