2 Commits

Author SHA1 Message Date
Johannes Meyer
673998bb9a Only open trusted iframe sources by default
Trusted in this case means, it was Icinga Web that
rendered a link and the user followed it. Whether
a source is trustworthy or not is detected by use
of the user's session id to hash it combined with
the source similar to how CSRF tokens are assembled.

(cherry picked from commit ec40efe1578c3c9cb445638f78e76a940a6864cf)
2025-03-26 10:26:57 +01:00
Alexander A. Klimov
7fe71f7472 Integrate the iframe module into the framework
refs #10881
2016-02-09 13:37:53 +01:00