Added protection from clickjacking (#706)

7 years ago · 99436c1334
parent 9e57a4ea28
commit 99436c1334
1 changed files with 1 additions and 0 deletions
--- a/HTTPServer.cpp
+++ b/HTTPServer.cpp
@ -875,6 +875,7 @@ namespace http {

 	void HTTPConnection::SendReply (HTTPRes& reply, std::string& content)
 	{
+		reply.add_header("X-Frame-Options", "SAMEORIGIN");
 		reply.add_header("Content-Type", "text/html");
 		reply.body = content;