Boaventura PauloBoaventura

Content-Security-Policy, X-Content-Security-Policy, X-WebKit-CSP

O cabeçalho de resposta HTTP Content-Security-Policy permite aos administradores de sites controlar os recursos que o navegador ou agente de usuário (user agent) pode carregar em uma determinada página. Com algumas exceções, as políticas envolvem principalmente especificar as origens do servidor e os endpoints de script. Isso ajuda a proteger contra ataques de XSS.

O cabeçalho de respsota HTTP X-Content-Security-Policy é requerido para implementar o CSP no Internet Explorer 10 e 11.

O cabeçalho de resposta HTTTP X-Webkit-CSP é requerido para implementar o CSP em versões mais antigas do Google Chrome, Safari e outros navegadores baseados na engine WebKit.

Para navegadores modernos, o cabeçalho Content-Security-Policy deve ser usado.

	<?php //This gets the current month starting at day 1, and the next month starting at day 1
	$now = mktime(0, 0, 0, date("m"), 1, date('Y'));
	$then = mktime(0, 0, 0, (date("m") % 12 + 1), 1, date('Y'));

	query_posts(
	array(
	'post_type' => 'classes', // Custom Post Type
	'order' => 'asc', // Order with earliest first
	'orderby' => 'wpcf-date-and-time', // Order by the custom field
	'posts_per_page' => -1, // Show all

	<?php
	if(php_sapi_name()!=="cli"){
	echo "Must be run from the commend line.";
	};
	/**
	* Setup a magento instance so we can run this export from the command line.
	*/
	require_once('app/Mage.php');
	umask(0);
	if (!Mage::isInstalled()) {

	[php]
	memory_limit = -1
	max_execution_time = 0
	date.timezone = "Europe/Prague"
	realpath_cache_size = "4096K"

	[opcache]
	opcache.enable = 1
	opcache.enable_cli = 1
	opcache.memory_consumption = 256

	// SNIPPET:

	e.preventDefault()


	// SNIPPET:

	onclick='document.formName.submit();'

	#! /bin/bash
	# https://nghttp2.org/documentation/h2load-howto.html
	sudo apt-get update
	sudo apt-get install g++ make binutils autoconf automake autotools-dev libtool pkg-config \
	zlib1g-dev libcunit1-dev libssl-dev libxml2-dev libev-dev libevent-dev libjansson-dev \
	libc-ares-dev libjemalloc-dev cython python3-dev python-setuptools libjemalloc-dev \
	libspdylay-dev

	git clone https://github.com/nghttp2/nghttp2.git && cd nghttp2
	autoreconf -i && automake && autoconf

	sudo apt-get install unzip;
	wget -O /tmp/chromedriver.zip http://chromedriver.googlecode.com/files/chromedriver_linux64_19.0.1068.0.zip && sudo unzip /tmp/chromedriver.zip chromedriver -d /usr/local/bin/;

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048

	/**
	* Address Auto Fill based on Postcode
	*
	* Author:
	* Rafael Patro <[email protected]>
	*
	* Intallation:
	* Add a CMS Static Block applying the entire script below.
	* Add a Widget to pages with address forms.
	*

	<!-- Start Audima Widget Injection -->
	<div id="audimaWidget"></div>
	<script src="//audio.audima.co/audima-widget.js"></script>
	<!-- End Audima Widget Injection -->

	<!-- Audima CSS Customization -->
	<style>
	#audimaWidget .audima-panel {
	/* Insira aqui a customização exemplo:
	background-color: silver;