Merge branch 'ent-7139-clickjacking' into 'develop'

Avoiding clickjacking Closes pandora_enterprise#7139 See merge request artica/pandorafms!4013
2021-05-11 09:45:08 +00:00 · 2021-05-11 09:45:08 +00:00 · 128f67b058
parent fc4d3b7d23 2ef57919a1
commit 128f67b058
1 changed files with 2 additions and 1 deletions
--- a/pandora_console/index.php
+++ b/pandora_console/index.php
@ -220,7 +220,8 @@ echo '<head>'."\n";
 // This starts the page head. In the callback function,
 // $page['head'] array content will be processed into the head.
 ob_start('ui_process_page_head');
-
+// Avoid clickjacking.
+header('X-Frame-Options: SAMEORIGIN');
 // Enterprise main.
 enterprise_include_once('index.php');