Add option to enable/disable iframe inclusion http header

2015-03-21 18:25:35 -04:00
parent ed54d852db
commit bcb39ad4db
3 changed files with 7 additions and 1 deletions
--- a/config.default.php
+++ b/config.default.php
@@ -124,3 +124,6 @@ define('REVERSE_PROXY_DEFAULT_DOMAIN', '');

 // Enable or disable "Strict-Transport-Security" HTTP header
 define('ENABLE_HSTS', true);
+
+// Enable or disable "X-Frame-Options: DENY" HTTP header
+define('ENABLE_XFRAME', true);