Added "X-Content-Type-Options: nosniff" header.

Till Brehm

2016-01-31 467f40ce2aaba5a1f317ba91d246d599bfd9a3d2

 interface/web/tools/user_settings.php

@@ -97,6 +97,16 @@
         $app->error('Invalid language.');
      }
   }
	
   function onAfterUpdate() {
      global $app;
		
      if($_POST['passwort'] != '') {
         $tmp_user = $app->db->queryOneRecord("SELECT passwort FROM sys_user WHERE userid = ?", $_SESSION['s']['user']['userid']);
         $_SESSION['s']['user']['passwort'] = $tmp_user['passwort'];
         unset($tmp_user);
      }
   }


}