From: Sarven Capadisli <csarven@status.net>
Date: Fri, 19 Feb 2010 12:13:05 +0000 (+0100)
Subject: Using inlineScript instead for clickjacking check
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=8d59f7cc9d7f9f12d46530db2d9efe0b7aaac1a5;p=quix0rs-gnu-social.git

Using inlineScript instead for clickjacking check
---

diff --git a/lib/action.php b/lib/action.php
index cd84662c96..fa9ddb9110 100644
--- a/lib/action.php
+++ b/lib/action.php
@@ -259,8 +259,7 @@ class Action extends HTMLOutputter // lawsuit
                 $this->script('util.js');
                 $this->script('geometa.js');
                 // Frame-busting code to avoid clickjacking attacks.
-                $this->element('script', array('type' => 'text/javascript'),
-                               'if (window.top !== window.self) { window.top.location.href = window.self.location.href; }');
+                $this->inlineScript('if (window.top !== window.self) { window.top.location.href = window.self.location.href; }');
                 Event::handle('EndShowStatusNetScripts', array($this));
                 Event::handle('EndShowLaconicaScripts', array($this));
             }