Add X-Frame-Options header to prevent click-jacking

Linked #1092
7 years ago · 07c3ff9710
1 changed files with 2 additions and 0 deletions
--- a/SABnzbd.py
+++ b/SABnzbd.py
@ -1340,6 +1340,8 @@ def main():
                            'tools.encode.on': True,
                            'tools.gzip.on': True,
                            'tools.gzip.mime_types': mime_gzip,
+                            'tools.response_headers.on': True,
+                            'tools.response_headers.headers': [('X-Frame-Options', 'SameOrigin')],
                            'request.show_tracebacks': True,
                            'error_page.401': sabnzbd.panic.error_page_401,
                            'error_page.404': sabnzbd.panic.error_page_404