From 3479d6cf532256b9bbb636bd8626f2200d720902 Mon Sep 17 00:00:00 2001
From: Cerdic <cedric@yterium.com>
Date: Mon, 22 Mar 2021 13:19:35 +0100
Subject: [PATCH] Fix https://core.spip.net/issues/3834 : Ajouter un header
 Referrer-Policy sur les pages des stats de l'espace prive

---
 paquet.xml          |  3 ++-
 stats_pipelines.php | 13 +++++++++++++
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/paquet.xml b/paquet.xml
index 331d132..2c5d0a0 100644
--- a/paquet.xml
+++ b/paquet.xml
@@ -1,7 +1,7 @@
 <paquet
 	prefix="stats"
 	categorie="statistique"
-	version="1.3.4"
+	version="1.3.5"
 	etat="stable"
 	compatibilite="[3.3.0-dev;3.3.*]"
 	logo="prive/themes/spip/images/statistique-32.png"
@@ -19,6 +19,7 @@
 	<pipeline nom="declarer_tables_auxiliaires" inclure="base/stats.php" />
 	<pipeline nom="configurer_liste_metas" inclure="stats_pipelines.php" />
 	<pipeline nom="affichage_entetes_final" inclure="stats_pipelines.php" />
+	<pipeline nom="affichage_entetes_final_prive" inclure="stats_pipelines.php" />
 	<pipeline nom="affiche_milieu" inclure="stats_pipelines.php" />
 	<pipeline nom="boite_infos" inclure="stats_pipelines.php" />
 	<pipeline nom="formulaire_admin" inclure="stats_pipelines.php" />
diff --git a/stats_pipelines.php b/stats_pipelines.php
index 9755c6f..7ddd177 100644
--- a/stats_pipelines.php
+++ b/stats_pipelines.php
@@ -51,6 +51,19 @@ function stats_affichage_entetes_final($entetes) {
 	return $entetes;
 }
 
+/**
+ * Ajouter un header Referrer-Policy sur les pages des stats
+ * @param array $entetes
+ * @return array
+ */
+function stats_affichage_entetes_final_prive($entetes) {
+	if (in_array(_request('exec'), ['stats_referers', 'stats_visites', 'stats_repartition', 'stats_lang'])) {
+		$entetes['Referrer-Policy'] = 'origin-when-cross-origin';
+	}
+	ray($entetes);
+	return $entetes;
+}
+
 
 /**
  * Compléter des pages de l'espace privé