From 079e2c80abe701fb7f2a93c43c38d8e2ac69517c Mon Sep 17 00:00:00 2001
From: ThanksForAllTheFish <mardavi84@gmail.com>
Date: Tue, 09 Sep 2014 08:26:56 -0400
Subject: [PATCH] Repository url is now r
---
src/main/java/com/gitblit/wicket/pages/BasePage.java | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)
diff --git a/src/main/java/com/gitblit/wicket/pages/BasePage.java b/src/main/java/com/gitblit/wicket/pages/BasePage.java
index 4971039..b454b7a 100644
--- a/src/main/java/com/gitblit/wicket/pages/BasePage.java
+++ b/src/main/java/com/gitblit/wicket/pages/BasePage.java
@@ -166,6 +166,9 @@
// use default Wicket caching behavior
super.setHeaders(response);
}
+
+ // XRF vulnerability. issue-500 / ticket-166
+ response.setHeader("X-Frame-Options", "SAMEORIGIN");
}
/**
--
Gitblit v1.9.1