Closed Bug 879110 Opened 12 years ago Closed 12 years ago

Enable X-Frame-Options for releases.mozilla.org

Categories

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Product:
Infrastructure & Operations Graveyard
Component:
WebOps: Other
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED INVALID

People

(Reporter: dchanm+bugzilla, Assigned: bburton)

References

(
URL
)

Details

+++ This bug was initially created as a clone of Bug #879104 +++ XFO is not enabled. A setting of X-Frame-Options: SAMEORIGIN should be sufficient. DENY would be ideal but I'm not comfortable with that unless we know for sure we don't need framing on the site.
Assignee: server-ops → server-ops-webops
Component: Server Operations → Server Operations: Web Operations
QA Contact: shyam → nmaul
releases.mo just geoip bounces you to various community mirrors, so this isn't really something we can take action on for this specific site -> % host releases.mozilla.org releases.mozilla.org is an alias for releases.geo.mozilla.com. releases.geo.mozilla.com has address 64.50.236.214 releases.geo.mozilla.com has address 216.165.129.141 releases.geo.mozilla.com has address 202.177.202.154 releases.geo.mozilla.com has address 204.246.0.136 releases.geo.mozilla.com has address 155.98.64.83 releases.geo.mozilla.com has address 156.56.247.196
Assignee: server-ops-webops → bburton
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → INVALID
Component: Server Operations: Web Operations → WebOps: Other
Product: mozilla.org → Infrastructure & Operations
Product: Infrastructure & Operations → Infrastructure & Operations Graveyard
You need to log in before you can comment on or make changes to this bug.