p3p

P3P and PHP session problem with iframes in Internet Explorer 9

守給你的承諾、 提交于 2019-11-30 09:28:26
I have a contact form inside of an iframe, which uses captcha, and therefore requires session variables. It works fine in every browser except IE9. To make it work in IE8, I added the following line at the beginning of the php document: header('P3P:CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"'); However, this doesn't appear to work in IE9. Any ideas? Best Answer: @user973810 Thanks a lot. This header('P3P: CP="NOI ADM DEV PSAi NAV OUR STP IND DEM"'); helped me out very much. It's questionable why only the IE does such strange things. Btw: here's the explanation for

What is the most broad P3P header that will work with IE?

﹥>﹥吖頭↗ 提交于 2019-11-29 20:43:14
"Medium Security" in IE8 states that third-party cookies that save information that can be used to contact you without your explicit consent are blocked. What is the most broad P3P header that means we do not collect such information, and will not be blocked by IE? I want to skip the nasty details of the P3P policy, and just set the header that implies the least legal obligations. Its semantic should be: we collect everything except information that can be used to contact you. ... without specifying anything else. Note that most P3P headers are inclusive - if they're not present, you're not

P3P and PHP session problem with iframes in Internet Explorer 9

烈酒焚心 提交于 2019-11-29 14:28:12
问题 I have a contact form inside of an iframe, which uses captcha, and therefore requires session variables. It works fine in every browser except IE9. To make it work in IE8, I added the following line at the beginning of the php document: header('P3P:CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"'); However, this doesn't appear to work in IE9. Any ideas? 回答1: Best Answer: @user973810 Thanks a lot. This header('P3P: CP="NOI ADM DEV PSAi NAV OUR STP IND DEM"'); helped

Javascript原型链和闭包深入解析

寵の児 提交于 2019-11-29 08:52:11
Javascript语法核心 Javascript目前可以说是Web前段开发标配脚本语言,相关标准已经发展到ES6,不过该标准并未得到大部分浏览器的支持,并且在该标准之前的很多项目都是基于ES5.x标准。文本所介绍的JavaScript语法即为ES5.x标准所定义的,也是目前浏览器完美支持的标准。 对于任何计算机语言的标配,控制结构、变量、函数等相关概念,这里不会做相关介绍。本文主要解决的是,JavaScript中最让人费解的两个概念, 原型链 和 闭包 。 原型链 对于原型链,个人认为一句话可以概括,即“ 原型链是以对象的构造函数形成的单向链表 ”。从中我们可以发现JavaScript中的对象间继承是在建立在对象的 构造函数对象(函数的prototype属性或对象的__proto__属性) 基础之上的,对象和其 构造函数对象 间存在连接。在这里我没有使用构造函数这一名称,而是在其后面加上了对象二字,主要是为了强调,JavaScript中对象的构造函数本身就是对象这一事实。JavaScript通过这一方法,巧妙的解决了私有和公有这一问题。 下面看几段代码,更好的感受JavaScript中的原型链。 Object.bar = "bar"; Object.prototype.foo = "foo"; function BaseClass(){ this.type = "base";

What is the most broad P3P header that will work with IE?

不想你离开。 提交于 2019-11-28 16:49:05
问题 "Medium Security" in IE8 states that third-party cookies that save information that can be used to contact you without your explicit consent are blocked. What is the most broad P3P header that means we do not collect such information, and will not be blocked by IE? I want to skip the nasty details of the P3P policy, and just set the header that implies the least legal obligations. Its semantic should be: we collect everything except information that can be used to contact you. ... without

Iframe, cross-domain cookies, p3p policy, and safari with error: A required anti-forgery token was not supplied or was invalid

♀尐吖头ヾ 提交于 2019-11-28 06:02:56
I asked this question a while back and found that IE blocks cross-domain cookies in an iframe unless you set a p3p policy . So far, the p3p fix has worked beautifully in ie. However, now we are getting the same error in safari. I found an article with a different p3p policy for safari. I added this code to set up the p3p policy, but I am still getting a request verification token error. public static void SetP3PCompactPolicy() { HttpContext current = HttpContext.Current; if (current.Request.UserAgent.ToLower().IndexOf("safari") >= 0) HttpContext.Current.Response.AddHeader("p3p", "CP=\"IDC DSP

Iframe Facebook application and cookies [Internet Explorer]

余生长醉 提交于 2019-11-27 18:54:02
I have downloaded the IBM P3P editor, created files and uploaded them to my server. And cookies are still not recognized in Internet Explorer. I've checked the P3P validation tool and it seems to validate. The application can be viewed here: apps.facebook.com/naplesnews and the iframe points to www.naplesnews.com/facebook/app/ . Again www.naplesnews.com/facebook/app/ seems to validate with no issues as well. Any idea what I'm missing here? Sorry to hear that you had to give up. I'm not sure what your exact issue is, but generally all your need for IE to accept cross-browser cookies is a P3P

What does header('P3P: CP=“CAO PSA OUR”'); do?

寵の児 提交于 2019-11-27 10:39:29
What is header('P3P: CP="CAO PSA OUR"'); for? How/why will it let this script work fine in IE? session_start(); if (!session_is_registered(pre_myusername)) { header("location:index.php"); exit(); } P3P is the Platform for Privacy Preferences. The value CP="CAO PSA OUR" describes a compact policy with the tokens contact and others (access information: What information is collected? ) Identified Contact Information and Other Identified Data: access is given to identified online and physical contact information as well as to certain other identified data. pseudo-analysis (purpose information:

Iframe, cross-domain cookies, p3p policy, and safari with error: A required anti-forgery token was not supplied or was invalid

一曲冷凌霜 提交于 2019-11-27 01:11:04
问题 I asked this question a while back and found that IE blocks cross-domain cookies in an iframe unless you set a p3p policy. So far, the p3p fix has worked beautifully in ie. However, now we are getting the same error in safari. I found an article with a different p3p policy for safari. I added this code to set up the p3p policy, but I am still getting a request verification token error. public static void SetP3PCompactPolicy() { HttpContext current = HttpContext.Current; if (current.Request

Iframe Facebook application and cookies [Internet Explorer]

为君一笑 提交于 2019-11-26 22:44:23
问题 I have downloaded the IBM P3P editor, created files and uploaded them to my server. And cookies are still not recognized in Internet Explorer. I've checked the P3P validation tool and it seems to validate. The application can be viewed here: apps.facebook.com/naplesnews and the iframe points to www.naplesnews.com/facebook/app/. Again www.naplesnews.com/facebook/app/ seems to validate with no issues as well. Any idea what I'm missing here? 回答1: Sorry to hear that you had to give up. I'm not