Add X-Frame-Options DENY in middleware.

clojars · Oct 18, 2013 · 46ed59c · 46ed59c
1 parent 010123b
commit 46ed59c
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/clojars/web.clj b/src/clojars/web.clj
@@ -65,6 +65,9 @@
                (when (not (empty? password))
                  {:username user :password password})))))
 
+(defn wrap-x-frame-options [f]
+  (fn [req] (update-in (f req) [:headers] assoc "X-Frame-Options" "DENY")))
+
 (defroutes clojars-app
   (context "/repo" _
            (-> repo/routes
@@ -81,7 +84,8 @@
         :workflows [(workflows/interactive-form)
                     registration/workflow]})
       (wrap-anti-forgery)
+      (wrap-x-frame-options)
       (wrap-exceptions)
       (site)
       (wrap-resource "public")
-      (wrap-file-info)))
+      (wrap-file-info)))