diff options
| author | James Moger <james.moger@gitblit.com> | 2014-09-05 13:41:45 -0600 |
|---|---|---|
| committer | James Moger <james.moger@gitblit.com> | 2014-09-05 13:41:45 -0600 |
| commit | 30dc4e420aa0b7c9f33c5f1af0f4b7dc26fcc63b (patch) | |
| tree | d23be99e7447d54803e90f15d0429f69eb7fbd91 | |
| parent | fcfcd84f3f4f37efb1b158670d4e4e9af4c90bc5 (diff) | |
| parent | 71647a6587d4a1b365e382590e535a3915255cac (diff) | |
| download | gitblit-30dc4e420aa0b7c9f33c5f1af0f4b7dc26fcc63b.tar.gz gitblit-30dc4e420aa0b7c9f33c5f1af0f4b7dc26fcc63b.zip | |
Merged #166 "Fix XRF vulnerability"
| -rw-r--r-- | src/main/java/com/gitblit/wicket/pages/BasePage.java | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/main/java/com/gitblit/wicket/pages/BasePage.java b/src/main/java/com/gitblit/wicket/pages/BasePage.java index 49710397..b454b7a8 100644 --- a/src/main/java/com/gitblit/wicket/pages/BasePage.java +++ b/src/main/java/com/gitblit/wicket/pages/BasePage.java @@ -166,6 +166,9 @@ public abstract class BasePage extends SessionPage { // use default Wicket caching behavior
super.setHeaders(response);
}
+
+ // XRF vulnerability. issue-500 / ticket-166
+ response.setHeader("X-Frame-Options", "SAMEORIGIN");
}
/**
|