beenull/power-mailinabox
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

hotfix merge #755 - Prevent click jacking of the management interface

Browse source
This commit is contained in:
Joshua Tauberer 2016-03-23 16:53:48 -04:00
parent 7fa9baf308
commit aa1fdaddaf
2 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
CHANGELOG.md
View file

@ -4,6 +4,10 @@ CHANGELOG
In Development
--------------
Control panel:
* Prevent click-jacking of the management interface by adding HTTP headers.
Setup:
* Setup dialogs did not appear correctly when connecting to SSH using Putty on Windows.

3
conf/nginx-primaryonly.conf
View file

@ -6,6 +6,9 @@
location /admin/ {
proxy_pass http://127.0.0.1:10222/;
proxy_set_header X-Forwarded-For $remote_addr;
add_header X-Frame-Options "DENY";
add_header X-Content-Type-Options nosniff;
add_header Content-Security-Policy "frame-ancestors 'none';";
}
# ownCloud configuration.