bug fix e2

openemr · Jul 28, 2022 · 2032434 · 2032434
1 parent 285fb23
commit 2032434
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/interface/login/login.php b/interface/login/login.php
@@ -25,6 +25,10 @@
  * @license   https://github.com/openemr/openemr/blob/master/LICENSE GNU General Public License 3
  */
 
+// prevent UI redressing
+Header("X-Frame-Options: DENY");
+Header("Content-Security-Policy: frame-ancestors 'none'");
+
 use OpenEMR\Common\Twig\TwigContainer;
 use OpenEMR\Services\FacilityService;
 

diff --git a/portal/index.php b/portal/index.php
@@ -16,6 +16,10 @@
  * @license   https://github.com/openemr/openemr/blob/master/LICENSE GNU General Public License 3
  */
 
+// prevent UI redressing
+Header("X-Frame-Options: DENY");
+Header("Content-Security-Policy: frame-ancestors 'none'");
+
 //setting the session & other config options
 
 // Will start the (patient) portal OpenEMR session/cookie.