2 Commits

Author SHA1 Message Date
Johannes Meyer
ec40efe157 Only open trusted iframe sources by default
Trusted in this case means, it was Icinga Web that
rendered a link and the user followed it. Whether
a source is trustworthy or not is detected by use
of the user's session id to hash it combined with
the source similar to how CSRF tokens are assembled.
2025-03-26 10:25:31 +01:00
Alexander A. Klimov
7fe71f7472 Integrate the iframe module into the framework
refs #10881
2016-02-09 13:37:53 +01:00