Closed
Bug 944817
Opened 12 years ago
Closed 12 years ago
Add X-Frame-Options header
Categories
(Webmaker Graveyard :: Login, defect)
Webmaker Graveyard
Login
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: jon, Assigned: jon)
References
()
Details
Attachments
(1 file)
The login server has no frameable content, so we can set the X-Frame-Options: Deny header to prevent clickjacking attacks.
|
Assignee | |
Comment 1•12 years ago
|
||
Attachment #8341126 -
Flags: review?(cade)
|
||
Updated•12 years ago
|
Attachment #8341126 -
Flags: review?(cade) → review+
|
||
Comment 2•12 years ago
|
||
Commit pushed to master at https://github.com/mozilla/login.webmaker.org
https://github.com/mozilla/login.webmaker.org/commit/ef426f9a6a43b85f13ac98e75876210dd7845232
Fix bug 944817 - Do not allow embedding of any login pages
|
|
||
Updated•12 years ago
|
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•