Add P3P headers to avoid potential issues with IE

2 files changed, 13 insertions, 0 deletions

diff --git a/app/Core/Http/Response.php b/app/Core/Http/Response.php
index 0f16fb65..0af763a6 100644
--- a/app/Core/Http/Response.php
+++ b/app/Core/Http/Response.php
@@ -129,6 +129,18 @@ class Response extends Base
     }
 
     /**
+     * Add P3P headers for Internet Explorer
+     *
+     * @access public
+     * @return $this
+     */
+    public function withP3P()
+    {
+        $this->withHeader('P3P', 'CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"');
+        return $this;
+    }
+
+    /**
      * Set HTTP response body
      *
      * @access public
diff --git a/app/Middleware/BootstrapMiddleware.php b/app/Middleware/BootstrapMiddleware.php
index 727f600c..778221b3 100644
--- a/app/Middleware/BootstrapMiddleware.php
+++ b/app/Middleware/BootstrapMiddleware.php
@@ -32,6 +32,7 @@ class BootstrapMiddleware extends BaseMiddleware
     {
         $this->response->withContentSecurityPolicy($this->container['cspRules']);
         $this->response->withSecurityHeaders();
+        $this->response->withP3P();
 
         if (ENABLE_XFRAME) {
             $this->response->withXframe();