Jump to content
krisj

P3P header for Internet Explorer

Recommended Posts

In case someone stumbles upon this here is a solution to a IFRAME embedded PW based site with Internet Explorer as user client.

In a true style of the most hated browser ever it will potentially throw you a curb ball when dealing with authentication, form submission etc. It is to do with IE security enforcements and session cookies. So you might want to try this in addition to CSRF and sessionFingerprint settings:

in your .php add

header('P3P: CP="NOI ADM DEV COM NAV OUR STP"');

or your markup add:

<meta http-equiv="P3P" content='CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"' />

if you care about the details just Google it.

Long story short IE seems to be the only browser that enforces an old, largely defunct standard that never took off.

enjoy!

  • Like 1

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...