<% /* * This should be included inside ..., * as it sets the stylesheet. * * This is included almost 30 times, so keep whitespace etc. to a minimum. */ // http://www.crazysquirrel.com/computing/general/form-encoding.jspx if (request.getCharacterEncoding() == null) request.setCharacterEncoding("UTF-8"); // Now that we use POST for most forms, these prevent the back button from working after a form submit // Just let the browser do its thing //response.setHeader("Pragma", "no-cache"); //response.setHeader("Cache-Control","no-cache"); //response.setDateHeader("Expires", 0); // the above will b0rk if the servlet engine has already flushed // the response prior to including this file, so it should be // near the top if (request.getParameter("i2p.contextId") != null) { session.setAttribute("i2p.contextId", request.getParameter("i2p.contextId")); } %> " /> images/favicon.ico"> <% // clickjacking if (intl.shouldSendXFrame()) { response.setHeader("X-Frame-Options", "SAMEORIGIN"); response.setHeader("Content-Security-Policy", "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'"); response.setHeader("X-XSS-Protection", "1; mode=block"); response.setHeader("X-Content-Type-Options", "nosniff"); } String conNonceParam = request.getParameter("consoleNonce"); if (net.i2p.router.web.CSSHelper.getNonce().equals(conNonceParam)) { intl.setLang(request.getParameter("lang")); intl.setNews(request.getParameter("news")); } %> console.css?<%=net.i2p.CoreVersion.VERSION%>" rel="stylesheet" type="text/css"> <% if (intl.getLang().equals("zh")) { // make the fonts bigger for chinese %> console_big.css?<%=net.i2p.CoreVersion.VERSION%>" rel="stylesheet" type="text/css"> <% } else if (intl.getLang().equals("ar")) { // Use RTL theme for Arabic %> console_ar.css?<%=net.i2p.CoreVersion.VERSION%>" rel="stylesheet" type="text/css"> <% } if (!intl.allowIFrame(request.getHeader("User-Agent"))) { %> mobile.css?<%=net.i2p.CoreVersion.VERSION%>" rel="stylesheet" type="text/css"> <% } %>