[jboss-jira] [JBoss JIRA] (WFLY-3450) Allow addition of HTTP headers to management console responses
[
https://issues.jboss.org/browse/WFLY-3450?page=com.atlassian.jira.plugin....
]
James Livingston commented on WFLY-3450:
----------------------------------------
Sorry, I wasn't clear - yes I meant web console to browser responses. You could for
example add "X-Frame-Options: deny" to prevent the console from being places in
various kinds of framing, to help prevent "clickjacking".
There are plenty more environment-specific headers that may be useful in some
situtations.
Allow addition of HTTP headers to management console responses
--------------------------------------------------------------
Key: WFLY-3450
URL: https://issues.jboss.org/browse/WFLY-3450
Project: WildFly
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Web Console
Reporter: James Livingston
Assignee: Heiko Braun
It would be useful to be able to add additional HTTP headers to the responses from the
web management console, such as X-Frame-Options.
--
This message was sent by Atlassian JIRA
(v6.2.3#6260)