Add option to enable/disable iframe inclusion http header

2015-03-21 18:25:35 -04:00
parent ed54d852db
commit bcb39ad4db
3 changed files with 7 additions and 1 deletions
--- a/app/constants.php
+++ b/app/constants.php
@@ -68,6 +68,9 @@ defined('MAIL_SENDMAIL_COMMAND') or define('MAIL_SENDMAIL_COMMAND', '/usr/sbin/s
 // Enable or disable "Strict-Transport-Security" HTTP header
 defined('ENABLE_HSTS') or define('ENABLE_HSTS', true);

+// Enable or disable "X-Frame-Options: DENY" HTTP header
+defined('ENABLE_XFRAME') or define('ENABLE_XFRAME', true);
+
 // Default files directory
 defined('FILES_DIR') or define('FILES_DIR', 'data/files/');