Use X-Frame-Options sameorigin header (#2547)

This commit is contained in:
Eduard Gert 2024-09-06 15:39:08 +02:00 committed by GitHub
parent a33b11946d
commit fcf150f704
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -541,7 +541,7 @@ renderCaddyfile() {
# clickjacking protection
# https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-frame-options
X-Frame-Options "DENY"
X-Frame-Options "SAMEORIGIN"
# xss protection
# https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-xss-protection