svn: /web/doc-editor/trunk/ crossdomain.xml
[email protected] (Chan Ka Shing)
| Newsgroups | php.doc.web |
|---|---|
| Message-ID | <[email protected]> |
mrkschan Tue, 27 Apr 2010 06:24:24 +0000
Revision: http://svn.php.net/viewvc?view=revision&revision=298639
Log:
fix crossdomain.xml to prevert CSRF
Changed paths:
U web/doc-editor/trunk/crossdomain.xml
Modified: web/doc-editor/trunk/crossdomain.xml
===================================================================
--- web/doc-editor/trunk/crossdomain.xml 2010-04-27 05:58:39 UTC (rev 298638)
+++ web/doc-editor/trunk/crossdomain.xml 2010-04-27 06:24:24 UTC (rev 298639)
@@ -1,5 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
- <allow-access-from domain="*"/>
-</cross-domain-policy>
\ No newline at end of file
+ <site-control permitted-cross-domain-policies="master-only" />
+ <allow-access-from domain="*.php.net"/>
+ <allow-access-from domain="localhost"/>
+ <allow-access-from domain="127.0.0.1"/>
+</cross-domain-policy>