Specify response header X-Frame-Options SAMEORIGIN for generated pages

James Moger

2014-09-05 71647a6587d4a1b365e382590e535a3915255cac

Specify response header X-Frame-Options SAMEORIGIN for generated pages

 src/main/java/com/gitblit/wicket/pages/BasePage.java

@@ -166,6 +166,9 @@
            // use default Wicket caching behavior

            super.setHeaders(response);

        }



        // XRF vulnerability. issue-500 / ticket-166

        response.setHeader("X-Frame-Options", "SAMEORIGIN");

    }



    /**