Zabbix

<?php

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

​

/**

 * @var CView $this

 * @var array $data

 */

​

function local_showHeader(array $data): void {

    header('Content-Type: text/html; charset=UTF-8');

    header('Cache-Control: no-store');

    header('X-Content-Type-Options: nosniff');

    header('X-XSS-Protection: 1; mode=block');

​

    if ($data['config']['x_frame_options'] !== '') {

        if (strcasecmp($data['config']['x_frame_options'], 'SAMEORIGIN') == 0

                || strcasecmp($data['config']['x_frame_options'], 'DENY') == 0) {

            $x_frame_options = $data['config']['x_frame_options'];

        }

        else {

            $x_frame_options = 'SAMEORIGIN';

            $allowed_urls = explode(',', $data['config']['x_frame_options']);

            $url_to_check = array_key_exists('HTTP_REFERER', $_SERVER)

                ? parse_url($_SERVER['HTTP_REFERER'], PHP_URL_HOST)

                : null;

​

            if ($url_to_check) {

                foreach ($allowed_urls as $allowed_url) {

                    if (strcasecmp(trim($allowed_url), $url_to_check) == 0) {

                        $x_frame_options = 'ALLOW-FROM '.$allowed_url;

                        break;

                    }

                }

            }

        }

​

        header('X-Frame-Options: '.$x_frame_options);

    }

​

    echo (new CPartial('layout.htmlpage.header', [

        'javascript' => [

            'files' => $data['javascript']['files']

        ],

        'stylesheet' => [

            'files' => $data['stylesheet']['files']

        ],

        'page' => [

            'title' => $data['page']['title']

        ],

        'user' => [