[#10391] Clickjacking protection for Horde
Summary Clickjacking protection for Horde
Queue Horde Framework Packages
Queue Version Git master
Type Enhancement
State Accepted
Priority 1. Low
Owners
Requester chuck@horde.org
Created 2011-07-27 (3736 days ago)
Due
Updated 2016-01-18 (2100 days ago)
Assigned
Resolved
Milestone
Patch No

Comments
Chuck Hagenbuch <chuck@horde.org> 2011-07-27 18:01:46
1. X-FRAME-OPTIONS
2. frame-busting JS (below)
3. Content security policy

<style>
html { visibility: hidden; }
</style>

<script>
if (self == top) {
     document.documentElement.style.visibility = 'visible';
} else {
     top.location = self.location;
}
</script>