Avoiding clickjacking

2021-04-08 11:28:01 +02:00 · 2021-04-08 11:28:01 +02:00 · 2ef57919a1
parent b62dc5c0c2
commit 2ef57919a1
1 changed files with 2 additions and 1 deletions
--- a/pandora_console/index.php
+++ b/pandora_console/index.php
@ -220,7 +220,8 @@ echo '<head>'."\n";
 // This starts the page head. In the callback function,
 // $page['head'] array content will be processed into the head.
 ob_start('ui_process_page_head');
-
+// Avoid clickjacking.
+header('X-Frame-Options: SAMEORIGIN');
 // Enterprise main.
 enterprise_include_once('index.php');