// use default Wicket caching behavior | // use default Wicket caching behavior | ||||
super.setHeaders(response); | super.setHeaders(response); | ||||
} | } | ||||
// XRF vulnerability. issue-500 / ticket-166 | |||||
response.setHeader("X-Frame-Options", "SAMEORIGIN"); | |||||
} | } | ||||
/** | /** |