[Freeipa-devel] [PATCH] 0008 Add X-Frame-Options and frame-ancestors options

[Pavel Vomacka]

On 03/11/2016 09:25 AM, Petr Vobornik wrote:
> On 03/10/2016 07:22 PM, Simo Sorce wrote:
>> On Thu, 2016-03-10 at 19:20 +0100, Pavel Vomacka wrote:
>>>
>>> On 03/10/2016 07:02 PM, Simo Sorce wrote:
>>>> On Thu, 2016-03-10 at 18:47 +0100, Pavel Vomacka wrote:
>>>>> Hi,
>>>>>
>>>>> These two options allow preventing clickjacking attacks. They don't
>>>>> allow open FreeIPA in frame, iframe or object element.
>>>> Will these apply to the whole server or just to /ipa ?
>>>>
>>> Yes, you are right, these apply to whole server. In this new patch they
>>> are applied only on /ipa.
>>>
>>> -- 
>>> Pavel^3 Vomacka
>>
>> Thanks,
>> LGTM
>>
>> Simo.
>>
>
> VERSION in a header needs to incremented so that the config file is 
> correctly processed during upgrade.
>
VERSION incremented.

-- 
Pavel^3 Vomacka
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pvomacka-0008-3-Add-X-Frame-Options-and-frame-ancestors-options.patch
Type: text/x-patch
Size: 1169 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160311/d238c5c4/attachment.bin>