#8111 Fixed X-Frame-Options

2021-10-18 16:36:10 +02:00 · 2021-10-18 16:36:10 +02:00 · c8a11543e8
parent 704403fd52
commit c8a11543e8
2 changed files with 3 additions and 2 deletions
--- a/pandora_console/.htaccess
+++ b/pandora_console/.htaccess
@ -1,6 +1,9 @@
 # pandora disable listing
 Options -Indexes

+# Avoid clickjacking
+Header always append X-Frame-Options SAMEORIGIN
+
 <Files ~ "\.log$"> 
 Order Allow,Deny
 Deny from All
--- a/pandora_console/index.php
+++ b/pandora_console/index.php
@ -220,8 +220,6 @@ echo '<head>'."\n";
 // This starts the page head. In the callback function,
 // $page['head'] array content will be processed into the head.
 ob_start('ui_process_page_head');
-// Avoid clickjacking.
-header('X-Frame-Options: SAMEORIGIN');
 // Enterprise main.
 enterprise_include_once('index.php');