Rev 143 | Rev 160 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log | RSS feed
Rev | Author | Line No. | Line |
---|---|---|---|
2 | daniel-mar | 1 | <?php |
2 | |||
3 | /* |
||
4 | * OIDplus 2.0 |
||
5 | * Copyright 2019 Daniel Marschall, ViaThinkSoft |
||
6 | * |
||
7 | * Licensed under the Apache License, Version 2.0 (the "License"); |
||
8 | * you may not use this file except in compliance with the License. |
||
9 | * You may obtain a copy of the License at |
||
10 | * |
||
11 | * http://www.apache.org/licenses/LICENSE-2.0 |
||
12 | * |
||
13 | * Unless required by applicable law or agreed to in writing, software |
||
14 | * distributed under the License is distributed on an "AS IS" BASIS, |
||
15 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||
16 | * See the License for the specific language governing permissions and |
||
17 | * limitations under the License. |
||
18 | */ |
||
19 | |||
112 | daniel-mar | 20 | define('IN_OIDPLUS', true); |
21 | |||
50 | daniel-mar | 22 | if (php_sapi_name() != 'cli') { |
23 | header('X-Content-Type-Options: nosniff'); |
||
24 | header('X-XSS-Protection: 1; mode=block'); |
||
95 | daniel-mar | 25 | header("Content-Security-Policy: default-src 'self' https://fonts.gstatic.com https://www.google.com/ https://www.gstatic.com/ https://cdnjs.cloudflare.com/; ". |
50 | daniel-mar | 26 | "style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/; ". |
27 | "img-src http: https:; ". |
||
28 | "script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google.com/ https://www.gstatic.com/ https://cdnjs.cloudflare.com/; ". |
||
29 | "frame-ancestors 'none'; ". |
||
30 | "object-src 'none'"); |
||
31 | header('X-Frame-Options: SAMEORIGIN'); |
||
32 | header('Referrer-Policy: no-referrer-when-downgrade'); |
||
33 | } |
||
2 | daniel-mar | 34 | |
35 | require_once __DIR__ . '/../3p/0xbb/Sha3.class.php'; |
||
36 | require_once __DIR__ . '/SecureMailer.class.php'; |
||
37 | |||
38 | require_once __DIR__ . '/functions.inc.php'; |
||
39 | require_once __DIR__ . '/oid_utils.inc.php'; |
||
16 | daniel-mar | 40 | require_once __DIR__ . '/uuid_utils.inc.php'; |
17 | daniel-mar | 41 | require_once __DIR__ . '/ipv4_functions.inc.php'; |
42 | require_once __DIR__ . '/ipv6_functions.inc.php'; |
||
12 | daniel-mar | 43 | require_once __DIR__ . '/anti_xss.inc.php'; |
2 | daniel-mar | 44 | |
45 | // --- |
||
46 | |||
47 | require_once __DIR__ . '/classes/OIDplus.class.php'; |
||
115 | daniel-mar | 48 | require_once __DIR__ . '/classes/OIDplusLogger.class.php'; |
61 | daniel-mar | 49 | require_once __DIR__ . '/classes/OIDplusPagePlugin.class.php'; |
2 | daniel-mar | 50 | require_once __DIR__ . '/classes/OIDplusDataBase.class.php'; |
51 | require_once __DIR__ . '/classes/OIDplusConfig.class.php'; |
||
52 | require_once __DIR__ . '/classes/OIDplusGui.class.php'; |
||
53 | require_once __DIR__ . '/classes/OIDplusTree.class.php'; |
||
54 | require_once __DIR__ . '/classes/OIDplusAuthUtils.class.php'; |
||
55 | require_once __DIR__ . '/classes/OIDplusRA.class.php'; |
||
56 | require_once __DIR__ . '/classes/OIDplusSessionHandler.class.php'; |
||
57 | require_once __DIR__ . '/classes/OIDplusObject.class.php'; |