squidy/qBittorrent
1
0
Fork 0
mirror of https://github.com/qbittorrent/qBittorrent.git synced 2025-12-19 23:17:21 -06:00
Code Issues Packages Projects Releases Wiki Activity

[WebUI] Avoid clickjacking attacks

Browse Source
This commit is contained in:
ngosang
2017-02-06 20:44:57 +01:00
committed by sledgehammer999
parent 7aef9828c9
commit f9f7a8cbf2
2 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/webui/abstractwebapplication.cpp
View File

@@ -101,7 +101,11 @@ Http::Response AbstractWebApplication::processRequest(const Http::Request &reque
request_ = request;
env_ = env;
clear(); // clear response
// clear response
clear();
// avoid clickjacking attacks
header(Http::HEADER_X_FRAME_OPTIONS, "SAMEORIGIN");
sessionInitialize();
if (!sessionActive() && !isAuthNeeded())