Download as
Browse Code »

Commit 754b0838e0c2857b0ca73d2ced675ed5b3042242

Authored by GitLab
1 parent d7960bca
Exists in spb-stable and in 2 other branches 7-0-stable, 7-0-stable-spb

Set x-frame-option to sameorigin to allow the Sidekiq iframe to display.

Showing 2 changed files with 2 additions and 1 deletions   Show diff stats
CHANGELOG
  Diff comments   View file @754b083
... ... @@ -13,6 +13,7 @@ v 7.0.0
13 13 - Group masters can create projects in group
14 14 - Deprecate ruby 1.9.3 support
15 15 - Only masters can rewrite/remove git tags
  16 + - Header X-Frame-Options allows SAMEORIGIN to display the Sidekiq interface
16 17  
17 18 v 6.9.2
18 19 - Revert the commit that broke the LDAP user filter
... ...
app/controllers/application_controller.rb
  Diff comments   View file @754b083
... ... @@ -164,7 +164,7 @@ class ApplicationController < ActionController::Base
164 164 end
165 165  
166 166 def default_headers
167   - headers['X-Frame-Options'] = 'DENY'
  167 + headers['X-Frame-Options'] = 'SAMEORIGIN' # Allow for the Sidekiq iframe in /admin/background_jobs
168 168 headers['X-XSS-Protection'] = '1; mode=block'
169 169 headers['X-UA-Compatible'] = 'IE=edge'
170 170 headers['X-Content-Type-Options'] = 'nosniff'
... ...