Readd AllowThirdPartyFraming option

We want by default no framing of phpMyAdmin, but still some sites might
need to embed it, so configuration option (with appropriate security
warning) is there.

This basically reverts d7e0bed28443e6cf8f41965cc2f27be19c667fa6.

1 files changed, 14 insertions, 0 deletions

diff --git a/js/cross_framing_protection.js b/js/cross_framing_protection.js
new file mode 100644
index 0000000000..6fb780350f
--- /dev/null
+++ b/js/cross_framing_protection.js
@@ -0,0 +1,14 @@
+/* vim: set expandtab sw=4 ts=4 sts=4: */
+/**
+ * Conditionally included if third-party framing is not allowed
+ *
+ */
+
+try {
+    if (top != self) {
+        top.location.href = self.location.href;
+    }
+} catch(e) {
+    alert("Redirecting... (error: " + e);
+    top.location.href = self.location.href;
+}