Prevent clickjacking of management interface

2016-03-13 18:23:10 +01:00 · 2016-03-13 18:23:10 +01:00 · e343061cf4
parent 65add24e2a
commit e343061cf4
1 changed files with 1 additions and 0 deletions
--- a/conf/nginx-primaryonly.conf
+++ b/conf/nginx-primaryonly.conf
@ -6,6 +6,7 @@
 	location /admin/ {
 		proxy_pass http://127.0.0.1:10222/;
 		proxy_set_header X-Forwarded-For $remote_addr;
+		add_header X-Frame-Options "SAMEORIGIN";
 	}

 	# ownCloud configuration.