Homepage: Use X-Frame-Options header to instruct browsers not to frame

Note that is not guaranteed to work, not all browsers respect this.
skyjake · May 25, 2012 · ef7631d · ef7631d
1 parent 1d357cb
commit ef7631d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/web/classes/frontcontroller.class.php b/web/classes/frontcontroller.class.php
@@ -555,6 +555,7 @@ public function outputHeader($mainHeading='')
             $siteTitle = "$mainHeading &bull; $siteTitle";
 
         header('Content-type: text/html; charset=utf-8');
+        header('X-Frame-Options: SAMEORIGIN');
 
 ?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">