P3P header for Internet Explorer

[krisj]

In case someone stumbles upon this here is a solution to a IFRAME embedded PW based site with Internet Explorer as user client.

In a true style of the most hated browser ever it will potentially throw you a curb ball when dealing with authentication, form submission etc. It is to do with IE security enforcements and session cookies. So you might want to try this in addition to CSRF and sessionFingerprint settings:

in your .php add

header('P3P: CP="NOI ADM DEV COM NAV OUR STP"');

or your markup add:

<meta http-equiv="P3P" content='CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"' />

if you care about the details just Google it.

Long story short IE seems to be the only browser that enforces an old, largely defunct standard that never took off.

enjoy!