Apache configuration file was changed to always set the header `X-Fra…

…me-Options` to `sameorigin` to prevent clickjacking attacks. (#122)
T-Systems-MMS · Jul 15, 2019 · 30af31b · 30af31b
1 parent fab8ef4
commit 30af31b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/docker/httpd.conf b/src/docker/httpd.conf
@@ -570,3 +570,5 @@ SSLRandomSeed startup builtin
 SSLRandomSeed connect builtin
 </IfModule>
 
+Header onsuccess unset X-Frame-Options
+Header always set X-Frame-Options "sameorigin"