Add the X-Frame-Options header to the app

alextselegidis · Mar 8, 2023 · f3a3fb0 · f3a3fb0
1 parent af19046
commit f3a3fb0
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/application/config/routes.php b/application/config/routes.php
@@ -57,6 +57,22 @@
 
 $route['translate_uri_dashes'] = FALSE;
 
+/*
+| -------------------------------------------------------------------------
+| FRAME OPTIONS HEADERS
+| -------------------------------------------------------------------------
+| Set the appropriate headers so that iframe control and permissions are 
+| properly configured.
+|
+| Options:
+|
+|   - DENY 
+|   - SAMEORIGIN 
+|
+*/
+
+header('X-Frame-Options: SAMEORIGIN');
+
 /*
 | -------------------------------------------------------------------------
 | CORS HEADERS