avoid a clickjacking attack reported on huntr.dev by @ranjit-git

postfixadmin · Aug 4, 2021 · 12ed3fb · 12ed3fb · ranjit-git · Aug 5, 2021
1 parent bf27390
commit 12ed3fb
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/common.php b/common.php
@@ -27,6 +27,9 @@
         if (empty($_SESSION['flash'])) {
             $_SESSION['flash'] = array();
         }
+
+        // avoid clickjacking attacks?
+        header('X-Frame-Options: DENY');
     }
 }