From 3c8818417798aaa5791f8581059883ad6431a0eb Mon Sep 17 00:00:00 2001
From: redmatrix <git@macgirvin.com>
Date: Thu, 7 Jan 2016 14:06:51 -0800
Subject: optional support for public key pinning

---
 boot.php | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'boot.php')

diff --git a/boot.php b/boot.php
index 152fb426b..f58709384 100755
--- a/boot.php
+++ b/boot.php
@@ -2126,6 +2126,9 @@ function construct_page(&$a) {
 	$profile = $a->profile;
 
 	header("Content-type: text/html; charset=utf-8");
+
+	// security headers - see https://securityheaders.io
+
 	if($a->get_scheme() === 'https')
 		header("Strict-Transport-Security: max-age=31536000");
 
@@ -2137,6 +2140,10 @@ function construct_page(&$a) {
 		header("X-Content-Type-Options: nosniff");	
 	}
 
+	if($a->config['system']['public_key_pins']) {
+		header("Public-Key-Pins: " . $a->config['system']['public_key_pins']);
+	}
+
 	require_once(theme_include(
 		((x($a->page, 'template')) ? $a->page['template'] : 'default' ) . '.php' )
 	);
-- 
cgit v1.2.3