From: Michiel de Jong <michiel@unhosted.org>
Date: Sat, 9 Jun 2012 19:01:12 +0000 (+0200)
Subject: avoid clickjacking
X-Git-Tag: v4.5.0beta1~74^2~422^2~6
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=322fd512612d569c75ebbf515e5d5d9d9d5578ea;p=nextcloud-server.git

avoid clickjacking
---

diff --git a/apps/remoteStorage/auth.php b/apps/remoteStorage/auth.php
index f508983d052..8cbd4aa20f1 100644
--- a/apps/remoteStorage/auth.php
+++ b/apps/remoteStorage/auth.php
@@ -25,6 +25,7 @@
 *
 */
 
+header("X-Frame-Options: Sameorigin");
 
 // Do not load FS ...
 $RUNTIME_NOSETUPFS = true;