| Summary: | X-Frame-Options=SAMEORIGIN is not set from opac-showmarc.pl | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Jonathan Druart <jonathan.druart> |
| Component: | Architecture, internals, and plumbing | Assignee: | Jonathan Druart <jonathan.druart> |
| Status: | CLOSED FIXED | QA Contact: | Testopia <testopia> |
| Severity: | major | ||
| Priority: | P5 - low | CC: | carlos.cordovas, chris, fridolin.somers, jonathan.druart, mtompset, nick |
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | All | ||
| Change sponsored?: | --- | Patch complexity: | --- |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
| Bug Depends on: | |||
| Bug Blocks: | 19552 | ||
| Attachments: |
Bug 19569: Set X-Frame-Options=SAMEORIGIN - opac-showmarc.ok
Bug 19569: Set X-Frame-Options=SAMEORIGIN - opac-showmarc.ok Bug 19569: Set X-Frame-Options=SAMEORIGIN - opac-showmarc.ok Bug 19569: Set X-Frame-Options=SAMEORIGIN - opac-showmarc.ok |
||
|
Description
Jonathan Druart
2017-11-02 19:59:34 UTC
150124 Clickjacking - Framable Page Created attachment 68900 [details] [review] Bug 19569: Set X-Frame-Options=SAMEORIGIN - opac-showmarc.ok Before and after: wget 'http://catalogue.kohadev.org/cgi-bin/koha/opac-showmarc.pl?id=1&viewas=html' must be the same Created attachment 68980 [details] [review] Bug 19569: Set X-Frame-Options=SAMEORIGIN - opac-showmarc.ok Before and after: wget 'http://catalogue.kohadev.org/cgi-bin/koha/opac-showmarc.pl?id=1&viewas=html' must be the same Signed-off-by: Mark Tompsett <mtompset@hotmail.com> As I had no data to worry about, I did a reset_all between steps. Worked fine. wget 'http://kohadev.mydnsname.org/cgi-bin/koha/opac-showmarc.pl?id=1&viewas=html' -O ~/before.html git bz apply reset_all wget 'http://kohadev.mydnsname.org/cgi-bin/koha/opac-showmarc.pl?id=1&viewas=html' -O ~/after.html diff ~/before.html ~/after.html Created attachment 68983 [details] [review] Bug 19569: Set X-Frame-Options=SAMEORIGIN - opac-showmarc.ok Before and after: wget 'http://catalogue.kohadev.org/cgi-bin/koha/opac-showmarc.pl?id=1&viewas=html' must be the same Signed-off-by: Mark Tompsett <mtompset@hotmail.com> Signed-off-by: Nick Clemens <nick@bywatersolutions.com> Created attachment 69653 [details] [review] Bug 19569: Set X-Frame-Options=SAMEORIGIN - opac-showmarc.ok Before and after: wget 'http://catalogue.kohadev.org/cgi-bin/koha/opac-showmarc.pl?id=1&viewas=html' must be the same Signed-off-by: Mark Tompsett <mtompset@hotmail.com> Signed-off-by: Nick Clemens <nick@bywatersolutions.com> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org> Pushed to 16.11.x will be in 16.11.15 Pushed to stable for 17.11.01 Pushed to 17.05.x for 17.05.07 Pushed to master for 18.05, thanks to everybody involved! |