Use X-Frame-Options sameorigin header (#2547)

This commit is contained in:
Eduard Gert
2024-09-06 15:39:08 +02:00
committed by GitHub
parent a33b11946d
commit fcf150f704

View File

@@ -541,7 +541,7 @@ renderCaddyfile() {
# clickjacking protection # clickjacking protection
# https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-frame-options # https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-frame-options
X-Frame-Options "DENY" X-Frame-Options "SAMEORIGIN"
# xss protection # xss protection
# https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-xss-protection # https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-xss-protection