reenable same-origin CSP

8 years ago · eebe473f13
parent 542d0cd17f
commit eebe473f13
1 changed files with 1 additions and 1 deletions
--- a/config.example.js
+++ b/config.example.js
@ -18,7 +18,7 @@ module.exports = {
    httpHeaders: {
        "X-XSS-Protection": "1; mode=block",
        "X-Content-Type-Options": "nosniff",
-        // 'X-Frame-Options': 'SAMEORIGIN',
+        'X-Frame-Options': 'SAMEORIGIN',
    },
    contentSecurity: [