From d583499a07e16c7f067258be91d0c6a47f23b866 Mon Sep 17 00:00:00 2001
From: Mark Janssen <mark@praseodym.net>
Date: Mon, 25 May 2015 14:39:43 +0200
Subject: [PATCH] Add X-Frame-Options header

---
 .../src/main/webapp/WEB-INF/user-context.xml                   | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml b/openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml
index 54b8b5a9b..2ef983e25 100644
--- a/openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml
+++ b/openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml
@@ -48,6 +48,9 @@
 		<security:logout logout-url="/logout" />
 		<security:anonymous />
 		<security:expression-handler ref="oauthWebExpressionHandler" />
+		<security:headers>
+			<security:frame-options policy="DENY" />
+		</security:headers>
 	</security:http>	
 
 </beans>