<?php
/**
* This file is created by Really Simple Security to test the CSP header length
* It will not load during regular wordpress execution
*/


if ( !headers_sent() ) {
if ( !function_exists("rsssl_is_ssl" ) ) {
  function rsssl_is_ssl() {
    if (    ( isset($_SERVER["HTTPS"]) && ("on" === $_SERVER["HTTPS"] || "1" === $_SERVER["HTTPS"]) )
    || (isset($_ENV["HTTPS"]) && ("on" === $_ENV["HTTPS"]))
    || (isset($_SERVER["SERVER_PORT"]) && ( "443" === $_SERVER["SERVER_PORT"] ) )
    || (isset($_SERVER["HTTP_X_FORWARDED_SSL"]) && (strpos($_SERVER["HTTP_X_FORWARDED_SSL"], "1") !== false))
    || (isset($_SERVER["HTTP_X_FORWARDED_SSL"]) && (strpos($_SERVER["HTTP_X_FORWARDED_SSL"], "on") !== false))
    || (isset($_SERVER["HTTP_CF_VISITOR"]) && (strpos($_SERVER["HTTP_CF_VISITOR"], "https") !== false))
    || (isset($_SERVER["HTTP_CLOUDFRONT_FORWARDED_PROTO"]) && (strpos($_SERVER["HTTP_CLOUDFRONT_FORWARDED_PROTO"], "https") !== false))
    || (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && (strpos($_SERVER["HTTP_X_FORWARDED_PROTO"], "https") !== false))
    || (isset($_SERVER["HTTP_X_PROTO"]) && (strpos($_SERVER["HTTP_X_PROTO"], "SSL") !== false))
    ) {
      return true;
    }
    return false;
  }
}
if ( rsssl_is_ssl() ) header("Strict-Transport-Security: max-age=63072000;");
header("X-XSS-Protection: 0");
header("X-Content-Type-Options: nosniff");
header("Referrer-Policy: strict-origin-when-cross-origin");
header("X-Frame-Options: SAMEORIGIN");
header("Content-Security-Policy: frame-ancestors 'self' ; upgrade-insecure-requests;");

}
header("X-REALLY-SIMPLE-SSL-TEST: %19%90%BC%17%25%A8%BB%07%E3p%99Ne%40ks%0D%CE%DF%05%ADU%A7%0E%DB%C5%DFK%DA%AF%D6%AE%8B.%1E%BB%169%1C%10%FE%0Br%A7EcX%05%1C%8A%99%BB%EA%FEI%E9%C0%1D%AB%3B%C5%9B%9F%E1I%AE%FA%AA%9D%B7%A0%DD%08a%08%04t%8A%D0I%ED%FB%86%0C%D8%A0%FD%F4%D6%E4a%91%9AR%25%9F%17%1A%8B%21%F60Z%5B0%29O%FB%27v%BE+j%AA%8C%B5%FF%AD%A8%21%D5%22mN%2F%91%0F%7B%BEk%B7%3AA%B1%C8%94%CA%88X%AE%D0uNMW%23%F6t%95q%1A%2A%CA%08%C94%BC%28%AD%3Fu9%CA%9F%9C%0F%5E%2B%1A%DBI%A8%12%BE%96%A3%1D%BA%02tq%7E%10v%91%CAr%D0%5D%B1%D5%B1%C9Q%943%91%F3J%");

 echo '<html><head><meta charset="UTF-8"><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"></head><body>Really Simple Security headers test page</body></html>';