ibm mobilefirst - Clickjacking through X-Frame in Worklight 7.0 -


i using mfp 7.0. protect desktop browser app clickjacking through x-frame. there configuration made in server can add x-frame option response header?

yes. feature available in mfp 7.0. use of ifixes later september 2015 feature.

once have ifix installed, can configure desktop browser environment or mobile web app environment prevent clickjacking through x-frames.

the configuration in application-descriptor.xml be:

<mobilewebapp cachemanifest="no-use" xframeoptions="deny"/> <desktopbrowser cachemanifest="no-use" xframeoptions="deny"/>  

the other options available :

no-use

or

sameorigin

more details here.


Comments

Popular posts from this blog

python - Best design pattern for collection of objects -

android - IllegalStateException: Cannot call this method while RecyclerView is computing a layout or scrolling -

go - serving up pdfs using golang -