Add X-Frame-Options header

2015-05-25 14:39:43 +02:00 · 2015-05-25 14:39:43 +02:00 · d583499a07
parent effe955953
commit d583499a07
1 changed files with 3 additions and 0 deletions
--- a/openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml
+++ b/openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml
@ -48,6 +48,9 @@
 		<security:logout logout-url="/logout" />
 		<security:anonymous />
 		<security:expression-handler ref="oauthWebExpressionHandler" />
+		<security:headers>
+			<security:frame-options policy="DENY" />
+		</security:headers>
 	</security:http>	

 </beans>