MID-5216

Evolveum · Mar 20, 2019 · a8d915b · a8d915b
1 parent c1c2846
commit a8d915b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/gui/admin-gui/src/main/java/com/evolveum/midpoint/web/boot/WebSecurityConfig.java b/gui/admin-gui/src/main/java/com/evolveum/midpoint/web/boot/WebSecurityConfig.java
@@ -155,6 +155,7 @@ protected void configure(HttpSecurity http) throws Exception {
         }
 
         http.headers().disable();
+        http.headers().frameOptions().deny();
 
         if (Arrays.stream(environment.getActiveProfiles()).anyMatch(p -> p.equalsIgnoreCase("cas"))) {
             http.addFilterAt(casFilter(), CasAuthenticationFilter.class);