Merge branch 'ent-8111-12549-R-WORKS-X-Frame-Options-Header-en-php' into 'develop'

Ent 8111 12549 r works x frame options header en php See merge request artica/pandorafms!4479
2021-11-15 10:05:30 +00:00 · 2021-11-15 10:05:30 +00:00 · 0a93d93701
parent 6b68203811 c8a11543e8
commit 0a93d93701
2 changed files with 3 additions and 2 deletions
--- a/pandora_console/.htaccess
+++ b/pandora_console/.htaccess
@ -1,6 +1,9 @@
 # pandora disable listing
 Options -Indexes

+# Avoid clickjacking
+Header always append X-Frame-Options SAMEORIGIN
+
 <Files ~ "\.log$"> 
 Order Allow,Deny
 Deny from All
--- a/pandora_console/index.php
+++ b/pandora_console/index.php
@ -220,8 +220,6 @@ echo '<head>'."\n";
 // This starts the page head. In the callback function,
 // $page['head'] array content will be processed into the head.
 ob_start('ui_process_page_head');
-// Avoid clickjacking.
-header('X-Frame-Options: SAMEORIGIN');
 // Enterprise main.
 enterprise_include_once('index.php');