| 1 |
<?php |
| 2 |
if (!defined('ABSPATH')) { |
| 3 |
exit; |
| 4 |
} |
| 5 |
?> |
| 6 |
<tr valign="top"> |
| 7 |
<th scope="row">X-Frame-Options |
| 8 |
<p class="description"><?php esc_html_e('This header can be used to indicate whether or not a browser should be allowed to render a page in a <frame>, <iframe> or <object>. Use this to avoid clickjacking attacks.', 'http-headers'); ?></p> |
| 9 |
<hr> |
| 10 |
<p class="description"><?php esc_html_e('Read more at', 'http-headers'); ?> |
| 11 |
<a target="_blank" href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options"><?php esc_html_e('MDN Web Docs', 'http-headers'); ?></a> |
| 12 |
</p> |
| 13 |
</th> |
| 14 |
<td> |
| 15 |
<fieldset> |
| 16 |
<legend class="screen-reader-text">X-Frame-Options</legend> |
| 17 |
<?php |
| 18 |
$http_headers_x_frame_options = get_option('hh_x_frame_options', 0); |
| 19 |
foreach ($http_headers_bools as $http_headers_k => $http_headers_v) |
| 20 |
{ |
| 21 |
?><p><label><input type="radio" class="http-header" name="hh_x_frame_options" value="<?php echo esc_attr($http_headers_k); ?>"<?php checked($http_headers_x_frame_options, $http_headers_k, true); ?> /> <?php echo esc_html($http_headers_v); ?></label></p><?php |
| 22 |
} |
| 23 |
?> |
| 24 |
</fieldset> |
| 25 |
</td> |
| 26 |
<td> |
| 27 |
<?php settings_fields( 'http-headers-xfo' ); ?> |
| 28 |
<?php do_settings_sections( 'http-headers-xfo' ); ?> |
| 29 |
<select name="hh_x_frame_options_value" class="http-header-value"<?php echo $http_headers_x_frame_options == 1 ? NULL : ' readonly'; ?>> |
| 30 |
<?php |
| 31 |
$http_headers_items = array('deny', 'sameorigin', 'allow-from'); |
| 32 |
$http_headers_x_frame_options_value = get_option('hh_x_frame_options_value'); |
| 33 |
foreach ($http_headers_items as $http_headers_item) |
| 34 |
{ |
| 35 |
?><option value="<?php echo esc_attr($http_headers_item); ?>"<?php selected($http_headers_x_frame_options_value, $http_headers_item); ?>><?php echo esc_html(strtoupper($http_headers_item)); ?></option><?php |
| 36 |
} |
| 37 |
?> |
| 38 |
</select> |
| 39 |
<input type="text" name="hh_x_frame_options_domain" class="http-header-value" placeholder="Domain" value="<?php echo esc_attr(get_option('hh_x_frame_options_domain')); ?>"<?php echo $http_headers_x_frame_options == 1 && $http_headers_x_frame_options_value == 'allow-from' ? NULL : ' style="display: none" readonly'; ?> /> |
| 40 |
</td> |
| 41 |
</tr> |
