[Freeipa-devel] [PATCH] 0008 Add X-Frame-Options and frame-ancestors options

[Pavel Vomacka]

On 03/10/2016 07:02 PM, Simo Sorce wrote:
> On Thu, 2016-03-10 at 18:47 +0100, Pavel Vomacka wrote:
>> Hi,
>>
>> These two options allow preventing clickjacking attacks. They don't
>> allow open FreeIPA in frame, iframe or object element.
> Will these apply to the whole server or just to /ipa ?
>
Yes, you are right, these apply to whole server. In this new patch they 
are applied only on /ipa.

--
Pavel^3 Vomacka
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pvomacka-0008-2-Add-X-Frame-Options-and-frame-ancestors-options.patch
Type: text/x-patch
Size: 1002 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160310/421b2c21/attachment.bin>