From 349a83fcba6fbe1d438bea4ca01afd050e3e2547 Mon Sep 17 00:00:00 2001 From: zeripath Date: Fri, 6 Aug 2021 21:47:10 +0100 Subject: [PATCH] Allow setting X-FRAME-OPTIONS (#16643) * Allow setting X-FRAME-OPTIONS This PR provides a mechanism to set the X-FRAME-OPTIONS header. Fix #7951 Signed-off-by: Andrew Thornton * Update docs/content/doc/advanced/config-cheat-sheet.en-us.md Co-authored-by: John Olheiser Co-authored-by: John Olheiser --- doc/advanced/config-cheat-sheet.en-us.md | 1 + 1 file changed, 1 insertion(+) diff --git a/doc/advanced/config-cheat-sheet.en-us.md b/doc/advanced/config-cheat-sheet.en-us.md index 9c7bddc8..e94c3ece 100644 --- a/doc/advanced/config-cheat-sheet.en-us.md +++ b/doc/advanced/config-cheat-sheet.en-us.md @@ -162,6 +162,7 @@ The following configuration set `Content-Type: application/vnd.android.package-a - `METHODS`: **GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS**: list of methods allowed to request - `MAX_AGE`: **10m**: max time to cache response - `ALLOW_CREDENTIALS`: **false**: allow request with credentials +- `X_FRAME_OPTIONS`: **SAMEORIGIN**: Set the `X-Frame-Options` header value. ## UI (`ui`)