diff options
| author | Joas Schilling <coding@schilljs.com> | 2017-04-12 12:37:32 +0200 |
|---|---|---|
| committer | Joas Schilling <coding@schilljs.com> | 2017-04-12 12:37:32 +0200 |
| commit | bd37021587fcb8e56d3cf984cad6f1193ad64cdb (patch) | |
| tree | 952a88691f515265315f8afceaf6ec119f328aa9 /lib/private/legacy/response.php | |
| parent | af42ca20252b166bec2da34970137ec790a18328 (diff) | |
| download | nextcloud-server-bd37021587fcb8e56d3cf984cad6f1193ad64cdb.tar.gz nextcloud-server-bd37021587fcb8e56d3cf984cad6f1193ad64cdb.zip | |
Fix casing of same origin frame option
Signed-off-by: Joas Schilling <coding@schilljs.com>
Diffstat (limited to 'lib/private/legacy/response.php')
| -rw-r--r-- | lib/private/legacy/response.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/private/legacy/response.php b/lib/private/legacy/response.php index 115eb5baa68..fa73f3d6d0d 100644 --- a/lib/private/legacy/response.php +++ b/lib/private/legacy/response.php @@ -257,7 +257,7 @@ class OC_Response { . 'object-src \'none\'; ' . 'base-uri \'self\'; '; header('Content-Security-Policy:' . $policy); - header('X-Frame-Options: Sameorigin'); // Disallow iFraming from other domains + header('X-Frame-Options: SAMEORIGIN'); // Disallow iFraming from other domains // Send fallback headers for installations that don't have the possibility to send // custom headers on the webserver side |