Follow SMF on Twitter.
Started by WimB, October 27, 2013, 03:25:04 PM
Quote from: Arantor on October 28, 2013, 10:34:53 AMAnd yet as shown the patch doesn't TOUCH the avatars or attachments code...You could try commenting out the three headers in index.php that were added but they didn't break it for me when I tested it...
Quote from: Arantor on October 28, 2013, 11:28:50 AMAnd commenting out the last two didn't fix it before?
header('X-XSS-Protection: 1; mode=block');
header('X-Frame-Options: SAMEORIGIN'); header('X-XSS-Protection: 1; mode=block'); header('X-Content-Type-Options: nosniff');
Quote from: Arantor on October 28, 2013, 11:43:54 AMUm, if you read the thread, I suggested removing the last two at separate points in the thread.So it's down to the Frame-Options header, which is fantastic because that's the most useful of the headers to add. Interestingly, Facebook and Twitter use the same header - so it's down to IE as to why it doesn't work.
Quote from: monster mashby on October 28, 2013, 12:42:16 PMIn IE10, the img referenced from the IMG tag indeed doesn't show up.
QuoteOver 90% of all computer problems can be traced back to the interface between the keyboard and the chair
Quote from: Arantor on October 28, 2013, 12:26:40 PMThat's even more hilarious... that's a feature IE themselves invented first!Makes me wonder why it's broken anything else.
QuoteAn Error Has Occurred!Session verification failed. Please try logging out and back in again, and then try again.
Quote from: Arantor on October 28, 2013, 07:36:47 PMWell, I'm not so much asking whether it did, all evidence is that it did. I'm asking *why*, because the changes that were made were made to Microsoft's *own* specification; Microsoft added that header in IE and adoption is growing.But yours is the first example of it actually failing something else. You can try commenting out the headers as suggested and see if that makes a difference.