Block framing on some pages

2021-03-09 17:00:43 +01:00
parent 2dd9ad4777
commit e8181eb6d2
3 changed files with 65 additions and 64 deletions
--- a/webcontroller/user_settings.go
+++ b/webcontroller/user_settings.go
@@ -60,6 +60,7 @@ func (wc *WebController) serveUserSettings(
 	r *http.Request,
 	p httprouter.Params,
 ) {
+	w.Header().Set("X-Frame-Options", "DENY")
 	td := wc.newTemplateData(w, r)

 	if !td.Authenticated {