[Freeipa-devel] [PATCH] 0008 Add X-Frame-Options and frame-ancestors options

[Petr Vobornik]

On 03/11/2016 10:20 AM, Pavel Vomacka wrote:
> 
> 
> On 03/11/2016 09:25 AM, Petr Vobornik wrote:
>> On 03/10/2016 07:22 PM, Simo Sorce wrote:
>>> On Thu, 2016-03-10 at 19:20 +0100, Pavel Vomacka wrote:
>>>>
>>>> On 03/10/2016 07:02 PM, Simo Sorce wrote:
>>>>> On Thu, 2016-03-10 at 18:47 +0100, Pavel Vomacka wrote:
>>>>>> Hi,
>>>>>>
>>>>>> These two options allow preventing clickjacking attacks. They don't
>>>>>> allow open FreeIPA in frame, iframe or object element.
>>>>> Will these apply to the whole server or just to /ipa ?
>>>>>
>>>> Yes, you are right, these apply to whole server. In this new patch they
>>>> are applied only on /ipa.
>>>>
>>>> -- 
>>>> Pavel^3 Vomacka
>>>
>>> Thanks,
>>> LGTM
>>>
>>> Simo.
>>>
>>
>> VERSION in a header needs to incremented so that the config file is
>> correctly processed during upgrade.
>>
> VERSION incremented.
> 
> 

ACK pushed to

master:
* 6eb174c5e72e4a4b60cbd61a666fbe90d01e46bb Add X-Frame-Options and
frame-ancestors options
ipa-4-3:
* d98345bc157a89c7d029a2c433ce0e2c6d5089ff Add X-Frame-Options and
frame-ancestors options
-- 
Petr Vobornik