Security: Disable midPoint embedding in iframes

Evolveum · Oct 9, 2023 · 5183b77 · 5183b77
1 parent 676fcd0
commit 5183b77
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.../evolveum/midpoint/authentication/impl/module/configurer/ModuleWebSecurityConfigurer.java b/.../evolveum/midpoint/authentication/impl/module/configurer/ModuleWebSecurityConfigurer.java
@@ -161,7 +161,7 @@ protected void configure(HttpSecurity http) throws Exception {
         }
 
         http.headers().disable();
-        http.headers().frameOptions().sameOrigin();
+        http.headers().frameOptions().deny();
     }
 
     protected AnonymousAuthenticationFilter createAnonymousFilter(Map<Class<?>, Object> sharedObjects) {