Page Menu
Home
Phabricator
Search
Configure Global Search
Log In
Files
F10067
framedeny.patch
Public
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Award Token
Flag For Later
Authored By
•
bzimport
Nov 22 2014, 1:05 AM
2014-11-22 01:05:53 (UTC+0)
Size
421 B
Referenced Files
None
Subscribers
None
framedeny.patch
View Options
--- a/includes/api/ApiFormatBase.php
+++ b/includes/api/ApiFormatBase.php
@@ -143,6 +143,9 @@ abstract class ApiFormatBase extends ApiBase {
$this->getMain()->getRequest()->response()->header( "Content-Type: $mime; charset=utf-8" );
+ //Set X-Frame-Options for all API calls (bug 39180)
+ $this->getMain()->getRequest()->response()->header( "X-Frame-Options: DENY" );
+
if ( $isHtml ) {
?>
<!DOCTYPE HTML>
File Metadata
Details
Attached
Mime Type
text/x-diff
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
9555
Default Alt Text
framedeny.patch (421 B)
Attached To
Mode
T41180: Edit tokens shown in frames using api
Attached
Detach File
Event Timeline
Log In to Comment