2.12.14 Add headers for Cross-Origin-Opener-Policy

Author: webpwnized

src/includes/constants.php

@@ -2,7 +2,7 @@
 	/* ------------------------------------------
 	 * @VERSION
 	 * ------------------------------------------*/
-	$C_VERSION = "2.12.3";
+	$C_VERSION = "2.12.4";
 	$C_VERSION_STRING = "Version: " . $C_VERSION;
 	$C_MAX_HINT_LEVEL = 1;
 

src/index.php

@@ -303,6 +303,10 @@ function handleException(){
 			/* Referrer Policy */
 			header("Referrer-Policy: unsafe-url", true);
 
+			/* Anti-Tab Nabbing headers */
+			header("Cross-Origin-Opener-Policy: unsafe-none");
+		    header_remove("Cross-Origin-Embedder-Policy");
+
 			header_remove("Pragma");
 
 			/* Content sniffing */
@@ -336,6 +340,10 @@ function handleException(){
 			/* Referrer Policy */
 			header("Referrer-Policy: no-referrer", true);
 
+			// Anti-Tab Nabbing headers
+			header("Cross-Origin-Opener-Policy: same-origin");
+			header("Cross-Origin-Embedder-Policy: require-corp");
+
 			/* Server version banners */
 			header_remove("X-Powered-By");
 			header_remove("Server");

version

@@ -1 +1 @@
-2.12.3
+2.12.4