MantisBT: master-1.2.x 3cd065de

Diff Back to Repository
Author Committer Branch Timestamp Parent
dhx dhx master-1.2.x 2010-04-22 04:02 master-1.2.x dfeddb5e
Affected Issues  0011824: Implement X-Frame-Options clickjacking protection
Changeset

Issue 0011824: Implement X-Frame-Options clickjacking protection

The X-Frame-Options header can help prevent clickjacking attacks against
MantisBT installations by preventing MantisBT from being loaded inside
an iframe.

Currently the following browsers support X-Frame-Options:

  • IE8+
  • Opera 10.50+
  • Safari 4+
  • Chrome 4.1.249.1042+
  • Firefox with NoScript
mod - core/http_api.php Diff File