cleanup, move X-Frame-Options up for clarity

This commit is contained in:
Ad Schellevis 2017-11-28 14:23:26 +01:00
parent 145c7c8f24
commit fc7fd2be4c

View File

@ -35,6 +35,7 @@ require_once("config.inc");
/* CSRF BEGIN: CHECK MUST BE EXECUTED FIRST; NO EXCEPTIONS */
require_once('csrf.inc');
/* CSRF END: THANK YOU FOR YOUR COOPERATION */
header("X-Frame-Options: SAMEORIGIN");
function get_current_theme()
{
@ -55,8 +56,6 @@ function html_safe($text)
return htmlspecialchars($text, ENT_QUOTES | ENT_HTML401);
}
header("X-Frame-Options: SAMEORIGIN");
require_once("authgui.inc");
/* Reserved table names to avoid colision */