[phpMyAdmin Git] [phpmyadmin/phpmyadmin] f6b08d: Add `object-src 'none'` to Content Security Policy...

[Michal Čihař]

  Branch: refs/heads/master
  Home:   https://github.com/phpmyadmin/phpmyadmin
  Commit: f6b08d3ffbdf0cda5fdaa1489c3d4b2bb0ef378e
      https://github.com/phpmyadmin/phpmyadmin/commit/f6b08d3ffbdf0cda5fdaa1489c3d4b2bb0ef378e
  Author: Ng Yik Phang <ngyikp at gmail.com>
  Date:   2017-03-30 (Thu, 30 Mar 2017)

  Changed paths:
    M libraries/Header.php

  Log Message:
  -----------
  Add `object-src 'none'` to Content Security Policy header

There’s no need to embed Flash or Java, so just turn off the ability
to embed them for security.

Ref: https://github.com/phpmyadmin/phpmyadmin/issues/12437

Signed-off-by: Ng Yik Phang <ngyikp at gmail.com>


  Commit: 37b87d7d44948c4b2495147c7878c922cc7f2819
      https://github.com/phpmyadmin/phpmyadmin/commit/37b87d7d44948c4b2495147c7878c922cc7f2819
  Author: Michal Čihař <michal at cihar.com>
  Date:   2017-04-03 (Mon, 03 Apr 2017)

  Changed paths:
    M libraries/Header.php

  Log Message:
  -----------
  Merge pull request #13134 from ngyikp/master

Add `object-src 'none'` to Content Security Policy header


Compare: https://github.com/phpmyadmin/phpmyadmin/compare/691349f1ab31...37b87d7d4494