Prevent clickjacking of management interface

e343061c · Michael Kroes · 65add24e · e343061c
Commit e343061c authored Mar 13, 2016 by Michael Kroes
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

nginx-primaryonly.conf conf/nginx-primaryonly.conf +1 -0

No files found.
--- a/conf/nginx-primaryonly.conf
+++ b/conf/nginx-primaryonly.conf
@@ -6,6 +6,7 @@
 	location /admin/ {
 		proxy_pass http://127.0.0.1:10222/;
 		proxy_set_header X-Forwarded-For $remote_addr;
+		add_header X-Frame-Options "SAMEORIGIN";
 	}

 	# ownCloud configuration.