diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2017-03-26 17:24:50 +0200 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2017-03-26 17:26:11 +0200 |
| commit | bff6c8aafc49a3260294c3244571e3a31fd09cca (patch) | |
| tree | 63478f0cffe1a9bf4e8e119c5c5286bd8a6b1a6c /.htaccess | |
| parent | ec6853a2a65c284af08f0241699f227516f25464 (diff) | |
| download | nextcloud-server-bff6c8aafc49a3260294c3244571e3a31fd09cca.tar.gz nextcloud-server-bff6c8aafc49a3260294c3244571e3a31fd09cca.zip | |
Move X-Frame-Options into PHP
The public calendar view should be embeddable and we can't do that if the .htaccess sets a global X-Frame-Options.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
Diffstat (limited to '.htaccess')
| -rw-r--r-- | .htaccess | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/.htaccess b/.htaccess index 525ee3a0fb6..7bf8759e383 100644 --- a/.htaccess +++ b/.htaccess @@ -14,7 +14,6 @@ Header set X-Content-Type-Options "nosniff" Header set X-XSS-Protection "1; mode=block" Header set X-Robots-Tag "none" - Header set X-Frame-Options "SAMEORIGIN" Header set X-Download-Options "noopen" Header set X-Permitted-Cross-Domain-Policies "none" SetEnv modHeadersAvailable true |