mcoder_rezvan2/browser-sec-lab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add

Browse Source
This commit is contained in:
mcoder 2026-04-14 20:31:12 +03:30
parent 3c8cefc60f
commit 4f694777e5
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Middleware/VulnerableHeadersMiddleware.php
View File

@ -24,7 +24,9 @@ public function handle(Request $request, Closure $next): Response
if ($request->has('allow_framing')) { if ($request->has('allow_framing')) {
$response->headers->remove('X-Frame-Options'); $response->headers->remove('X-Frame-Options');
} else { } else {
$response->headers->set('X-Frame-Options', 'DENY'); // برای تست Clickjacking موقتاً این خط را کامنت می‌کنیم تا ریدایرکت‌ها هم مسدود نشوند
// $response->headers->set('X-Frame-Options', 'DENY');
$response->headers->remove('X-Frame-Options');
} }
// ۳. خاموش کردن محافظت پیش‌فرض XSS // ۳. خاموش کردن محافظت پیش‌فرض XSS