add X-Frame-Options to console headers

2012-05-13 13:05:17 +00:00
parent fc5e30e6ae
commit 3685bf04d0
14 changed files with 37 additions and 1 deletions
--- a/apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java
+++ b/apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java
@ -148,6 +148,7 @@ public class I2PSnarkServlet extends DefaultServlet {
        _imgPath = _themePath + "images/";
        // this is the part after /i2psnark
        String path = req.getServletPath();
+        resp.setHeader("X-Frame-Options", "SAMEORIGIN");

        // AJAX for mainsection
        if ("/.ajax/xhr1.html".equals(path)) {