Prevent the devconsole from being loaded in iframes. (#880)

heroiclabs · Jul 6, 2022 · 50642ad · 50642ad
1 parent e2e02fc
commit 50642ad
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/server/console.go b/server/console.go
@@ -396,6 +396,7 @@ func registerDashboardHandlers(logger *zap.Logger, router *mux.Router) {
 		}
 
 		w.Header().Add("Cache-Control", "no-cache")
+		w.Header().Set("X-Frame-Options", "deny")
 		w.Write(indexBytes)
 		return
 	}