Disallow iframing

This commit is contained in:
Sebastiaan Janssen
2017-02-24 15:51:10 +01:00
parent d25e6452fe
commit 825b02fb83
+29
View File
@@ -419,6 +419,8 @@
<customHeaders>
<add name="P3P" value="policyref=&quot;http://our.umbraco.org/w3c/p3p.xml&quot;" />
<remove name="X-Powered-By" />
<remove name="X-Frame-Options" />
<add name="X-Frame-Options" value="SAMEORIGIN" />
</customHeaders>
</httpProtocol>
@@ -661,4 +663,31 @@
<urlCompression doStaticCompression="false" doDynamicCompression="false" dynamicCompressionBeforeCache="false" />
</system.webServer>
</location>
<location path="repo">
<system.webServer>
<httpProtocol>
<customHeaders>
<remove name="X-Frame-Options" />
</customHeaders>
</httpProtocol>
</system.webServer>
</location>
<location path="repo_category">
<system.webServer>
<httpProtocol>
<customHeaders>
<remove name="X-Frame-Options" />
</customHeaders>
</httpProtocol>
</system.webServer>
</location>
<location path="repo_viewproject">
<system.webServer>
<httpProtocol>
<customHeaders>
<remove name="X-Frame-Options" />
</customHeaders>
</httpProtocol>
</system.webServer>
</location>
</configuration>