From 51b94df0049f3855d6660ddbfa8c81da28d7cb8a Mon Sep 17 00:00:00 2001 From: thomasb Date: Wed, 23 Nov 2011 18:53:58 +0000 Subject: Improve clickjacking protection: bust frame or disable all form elements and abort UI initialization git-svn-id: https://svn.roundcube.net/trunk@5476 208e9e7b-5314-0410-a742-e7e81cd9613c --- roundcubemail/program/include/rcube_template.php | 1 + 1 file changed, 1 insertion(+) (limited to 'roundcubemail/program/include') diff --git a/roundcubemail/program/include/rcube_template.php b/roundcubemail/program/include/rcube_template.php index 1a82f7e6e..ea221767c 100755 --- a/roundcubemail/program/include/rcube_template.php +++ b/roundcubemail/program/include/rcube_template.php @@ -71,6 +71,7 @@ class rcube_template extends rcube_html_page //$this->framed = $framed; $this->set_env('task', $task); + $this->set_env('x_frame_options', $this->app->config->get('x_frame_options', 'sameorigin')); // load the correct skin (in case user-defined) $this->set_skin($this->config['skin']); -- cgit v1.2.3