ibm mobilefirst - Clickjacking through X-Frame in Worklight 7.0 -
i using mfp 7.0. protect desktop browser app clickjacking through x-frame. there configuration made in server can add x-frame option response header?
yes. feature available in mfp 7.0. use of ifixes later september 2015 feature.
once have ifix installed, can configure desktop browser environment or mobile web app environment prevent clickjacking through x-frames.
the configuration in application-descriptor.xml be:
<mobilewebapp cachemanifest="no-use" xframeoptions="deny"/> <desktopbrowser cachemanifest="no-use" xframeoptions="deny"/>
the other options available :
no-use
or
sameorigin
more details here.
Comments
Post a Comment