Jump to content
krisj

P3P header for Internet Explorer

Recommended Posts

In case someone stumbles upon this here is a solution to a IFRAME embedded PW based site with Internet Explorer as user client.

In a true style of the most hated browser ever it will potentially throw you a curb ball when dealing with authentication, form submission etc. It is to do with IE security enforcements and session cookies. So you might want to try this in addition to CSRF and sessionFingerprint settings:

in your .php add

header('P3P: CP="NOI ADM DEV COM NAV OUR STP"');

or your markup add:

<meta http-equiv="P3P" content='CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"' />

if you care about the details just Google it.

Long story short IE seems to be the only browser that enforces an old, largely defunct standard that never took off.

enjoy!

  • Like 1

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...