data['htmlinject'] = array( 'htmlContentPre' => array(), 'htmlContentPost' => array(), 'htmlContentHead' => array(), ); $jquery = array(); if (array_key_exists('jquery', $this->data)) $jquery = $this->data['jquery']; if (array_key_exists('pageid', $this->data)) { $hookinfo = array( 'pre' => &$this->data['htmlinject']['htmlContentPre'], 'post' => &$this->data['htmlinject']['htmlContentPost'], 'head' => &$this->data['htmlinject']['htmlContentHead'], 'jquery' => &$jquery, 'page' => $this->data['pageid'] ); SimpleSAML_Module::callHooks('htmlinject', $hookinfo); } // - o - o - o - o - o - o - o - o - o - o - o - o - /** * Do not allow to frame simpleSAMLphp pages from another location. * This prevents clickjacking attacks in modern browsers. * * If you don't want any framing at all you can even change this to * 'DENY', or comment it out if you actually want to allow foreign * sites to put simpleSAMLphp in a frame. The latter is however * probably not a good security practice. */ header('X-Frame-Options: SAMEORIGIN'); ?>