Mirrors/gitea
0
0 Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2026-10-05 23:34:11 +02:00
Code Issues Activity

Allow setting X-FRAME-OPTIONS (#16643)

Browse Source 
* Allow setting X-FRAME-OPTIONS

This PR provides a mechanism to set the X-FRAME-OPTIONS header.

Fix #7951

Signed-off-by: Andrew Thornton <art27@cantab.net>

* Update docs/content/doc/advanced/config-cheat-sheet.en-us.md

Co-authored-by: John Olheiser <john.olheiser@gmail.com>

Co-authored-by: John Olheiser <john.olheiser@gmail.com>
This commit is contained in:
zeripathandJohn Olheiser authored and GitHub committed 2021-08-06 16:47:10 -04:00
1 parent 067d82b5a6
commit afd88a2418
7 files changed
+12 -6
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

routers/web/base.go
+1 -1
View File
@@ -171,7 +171,7 @@ func Recovery() func(next http.Handler) http.Handler {
store["SignedUserName"] = ""
}
w.Header().Set(`X-Frame-Options`, `SAMEORIGIN`)
w.Header().Set(`X-Frame-Options`, setting.CORSConfig.XFrameOptions)
if !setting.IsProd() {
store["ErrorMsg"] = combinedErr