MAGETWO-16192: Security: Clickjacking solution - introduce X-Frame-Options (f8319312) · Commits · KIII-12 / Magento

Snippets Groups Projects

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Commit f8319312 authored 9 years ago by

Dale Sikkema

Browse files

MAGETWO-16192: Security: Clickjacking solution - introduce X-Frame-Options

 - use plugin to send xFrameOptions header when response is sent
 - get inject header value into plugin via DI argument injection
 - setup a config field in env.php to contain non-backend header values

parent 86646fca

Hide whitespace changes

Inline Side-by-side

Showing with 136 additions and 9 deletions

Please register or to comment

Admin message

MAGETWO-16192: Security: Clickjacking solution - introduce X-Frame-Options