MAGETWO-43510: x-frame-options missing from setup

safwkhan · safwkhan · commit 968b45a9b75f · 2015-10-08T10:18:02.000-05:00
- Changed in nginx configuration based on reviewers suggestion.
diff --git a/nginx.conf.sample b/nginx.conf.sample
@@ -36,6 +36,7 @@ location /setup {
     location ~ /setup/(?!pub/). {
         deny all;
     }
+    add_header X-Frame-Options "SAMEORIGIN";
 }
 
 location /update {
@@ -63,6 +64,7 @@ location /pub {
         deny all;
     }
     alias $MAGE_ROOT/pub;
+    add_header X-Frame-Options "SAMEORIGIN";
 }
 
 location /static/ {

Original file line number	Diff line number	Diff line change
`@@ -36,6 +36,7 @@ location /setup {`
`36`	`36`	`location ~ /setup/(?!pub/). {`
`37`	`37`	`deny all;`
`38`	`38`	`}`
	`39`	`+ add_header X-Frame-Options "SAMEORIGIN";`
`39`	`40`	`}`
`40`	`41`
`41`	`42`	`location /update {`
`@@ -63,6 +64,7 @@ location /pub {`
`63`	`64`	`deny all;`
`64`	`65`	`}`
`65`	`66`	`alias $MAGE_ROOT/pub;`
	`67`	`+ add_header X-Frame-Options "SAMEORIGIN";`
`66`	`68`	`}`
`67`	`69`
`68`	`70`	`location /static/ {`