Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow embedded documents from SAMEORIGIN #15

Merged
merged 5 commits into from Apr 20, 2016

Conversation

cadesalaberry
Copy link
Contributor

@cadesalaberry cadesalaberry commented Apr 20, 2016

Your policy on embedded documents was too strict for my project.

Because svg were treated as document on my webpage, I was not allowed to embed them in an object tag.

I got confused as to where to put the directive, but finally, here it is :)

@smashwilson
Copy link
Owner

👍 Using SAMEORIGIN will still protect against clickjacking attacks, so sure.

@smashwilson smashwilson merged commit 6533ea1 into smashwilson:master Apr 20, 2016
@cadesalaberry cadesalaberry changed the title Allow embeded documents from SAMEORIGIN Allow embedded documents from SAMEORIGIN Apr 20, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants