]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/commit
Apache: deny framing of WebUI from different origins
authorpeter.mueller@ipfire.org <peter.mueller@ipfire.org>
Mon, 4 Nov 2019 18:53:00 +0000 (18:53 +0000)
committerArne Fitzenreiter <arne_f@ipfire.org>
Wed, 13 Nov 2019 19:10:33 +0000 (19:10 +0000)
commitbe8afd151f95cf6b2a77e73524c42628600cd543
tree5793e2b799884d7fe2160c06053741cea0e71380
parent90582bb01e41bd700421f59587724f395a57d951
Apache: deny framing of WebUI from different origins

There is no legitimate reason to do this. Setting header X-Frame-Options
to "sameorigin" is necessary for displaying some collectd graphs on the
WebUI.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
config/httpd/vhosts.d/ipfire-interface-ssl.conf
config/httpd/vhosts.d/ipfire-interface.conf