From bd37021587fcb8e56d3cf984cad6f1193ad64cdb Mon Sep 17 00:00:00 2001 From: Joas Schilling Date: Wed, 12 Apr 2017 12:37:32 +0200 Subject: Fix casing of same origin frame option Signed-off-by: Joas Schilling --- lib/private/legacy/response.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'lib') diff --git a/lib/private/legacy/response.php b/lib/private/legacy/response.php index 115eb5baa68..fa73f3d6d0d 100644 --- a/lib/private/legacy/response.php +++ b/lib/private/legacy/response.php @@ -257,7 +257,7 @@ class OC_Response { . 'object-src \'none\'; ' . 'base-uri \'self\'; '; header('Content-Security-Policy:' . $policy); - header('X-Frame-Options: Sameorigin'); // Disallow iFraming from other domains + header('X-Frame-Options: SAMEORIGIN'); // Disallow iFraming from other domains // Send fallback headers for installations that don't have the possibility to send // custom headers on the webserver side -- cgit v1.2.3