freeipa

Clone
Source Code
GIT

#4631 Add X-Frame-Options, frame-ancestors to UI webpages
Closed: Fixed None Opened 9 years ago by simo.

Closed: Fixed
Reopen Issue

These options allow preventing clickjacking attacks and are very simple to set, so it seem a worth low hanging fruit to strenghten the security of the UI.

During processing of remaining tickets in 4.2 Backlog, this ticket was found as suitable to be fixed in the nearest bugfixing branch - which is 4.2.x.

FreeIPA 4.2.1 was released, moving to 4.2.x.

master:

  • 6eb174c Add X-Frame-Options and frame-ancestors options

ipa-4-3:

  • d98345b Add X-Frame-Options and frame-ancestors options

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1352912 (Red Hat Enterprise Linux 7)

Metadata Update from @simo:
- Issue assigned to pvomacka
- Issue set to the milestone: FreeIPA 4.3.2
7 years ago

Login to comment on this ticket.

Metadata
None
None
None
normal
None
None
None
None
task
None
None
Web UI
None
1
None
None
None
None
https://bugzilla.redhat.com/show_bug.cgi?id=1352912
None
None
None
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.