diff options
| author | Appleman1234 <applemansigloo@gmail.com> | 2026-08-08 11:28:08 +1000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-08-08 11:28:08 +1000 |
| commit | e19143f1a9430cd48bc6fc5ffd951bed7057531b (patch) | |
| tree | 1eb3c2446d828594f91d85b6de815c85b1eea2e0 /templates/themes/calendar/calendarpost.php | |
| parent | 8118f7aa5c705382cfa5216a284929d7e1d6f0c8 (diff) | |
| parent | 65a993fe06abaadcbcb23f6c239db36eb6471954 (diff) | |
Merge pull request #219 from fishystock/fishystock/security-fixes
security fixes for calendar api
Diffstat (limited to 'templates/themes/calendar/calendarpost.php')
| -rw-r--r-- | templates/themes/calendar/calendarpost.php | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/templates/themes/calendar/calendarpost.php b/templates/themes/calendar/calendarpost.php index ac2c1a72..7ad9377a 100644 --- a/templates/themes/calendar/calendarpost.php +++ b/templates/themes/calendar/calendarpost.php @@ -51,7 +51,11 @@ $method = $_SERVER['REQUEST_METHOD']; } elseif ($method == 'GET') { // Method is GET $query = query("SELECT * FROM calendar_events ORDER BY id") or error(db_error()); - echo json_encode($query->fetchAll(PDO::FETCH_ASSOC), JSON_THROW_ON_ERROR); + + header('Content-Type: application/json; charset=utf-8'); + header('X-Content-Type-Options: nosniff'); + + echo json_encode($query->fetchAll(PDO::FETCH_ASSOC), JSON_THROW_ON_ERROR); } ?> |