Add missing Cross-Origin-Resource-Policy header - fixes #3

2023-10-20 19:06:52 +02:00
parent b87b6a8c2c
commit be848fe9dd
1 changed files with 1 additions and 0 deletions
--- a/counter.php
+++ b/counter.php
@ -42,6 +42,7 @@ header_remove('X-Frame-Options');
 header("Content-Security-Policy: base-uri 'self'; default-src 'none'; frame-ancestors '*'");
 header('Content-Type: image/gif');
 header('Access-Control-Allow-Origin: *');
+header('Cross-Origin-Resource-Policy: cross-origin');

 //add visitor to db
 if(isSet($_COOKIE["counted$_REQUEST[id]"])){